When an AI Agent Can Act, Employees Need a Way to Stop It

    An employee supervising an AI agent needs to understand what it is about to do. They also need a practical way to intervene when the action is wrong.

    WCRC · Published

    Hand beside a pause control for an abstract agent workflow; WCRC Workplace cover.

    WCRC Analysis

    Microsoft’s 23 October account of its London Frontier Tour describes systems that can carry out multi-step workflows with human oversight. The event took place on 21 October. Its account discusses access to organisational information and controls around the actions an agent may take, alongside workplace examples involving fleet information and technical documents.

    This is a vendor’s account of its own event. It does not independently establish the effectiveness of every deployment or the controls each customer has implemented. WCRC’s analysis concerns what meaningful employee oversight should require as an agent moves from producing an answer to taking action.

    Permission must be understandable at the point of use

    An instruction can sound simple while involving several different permissions. In a hypothetical customer-service workflow, finding an order, drafting a reply and issuing a refund affect the business in different ways. An employee should be able to tell which of those steps the agent may perform alone.

    The approval request needs to describe the consequence. A generic confirmation button is weak support for a decision if the employee cannot see which record will change or what will be sent outside the organisation. More explanation is warranted when an action is difficult to reverse.

    Access to information deserves the same care. An agent may need enough context to complete a task without needing every document available to the person supervising it. Employers should examine the access required for the specific workflow and how that access changes when the task ends.

    Those boundaries also affect the employee’s responsibility. It is unreasonable to expect someone to supervise a process whose actions they cannot see. A clear role should identify what the person must check and what the system is expected to prevent.

    An interruption needs a recovery plan

    A pause control is useful only if the employee knows what has already happened. Stopping a workflow after a message has been sent cannot recall the recipient’s knowledge of it. Other actions may still be reversible.

    The interface should make that distinction visible. A useful activity record would show completed actions, pending steps and the route for correcting an error. Where reversal requires another team’s authority, the employee needs a named escalation path rather than an instruction to seek help somewhere else.

    Training can use test situations to check those arrangements before a workflow handles live work. The exercise should establish whether a person notices an incorrect proposal, can interrupt it and understands the next step. These are proposed checks; WCRC has not tested the systems described at Microsoft’s event.

    Employers should also consider whether workload leaves time for the review they require. If every approval is treated as an interruption to be cleared quickly, adding more approval prompts may produce little useful scrutiny. The design of the job and the design of the control have to support each other.

    Microsoft also has a separate WCRC 2026 brand assessment. That record concerns its assessed brand performance; it does not certify the safety or effectiveness of a particular AI deployment.

    For employees, confidence in an acting system can be grounded in something observable: clear limits, an intelligible record of actions and a reliable route to correct a mistake. Those are conditions an organisation can examine before asking people to rely on the agent.

    WCRC workplace analysis based on a published vendor account. No independent productivity or safety claim is made for the named deployments.

    Sources