Eitan Cohen 7 min readAn AI agent rarely faces a clean choice between “knows” and “does not know.” It operates with partial evidence: a customer request is vague, an approval rule has an exception, or two records disagree. The practical question is not whether uncertainty exists. It is whether acting under that uncertainty is preferable to interrupting a person.
A useful control mechanism is the regret budget: the maximum expected cost a system may expose the business to before it must ask, draft, defer, or escalate. Unlike a generic confidence threshold, a regret budget accounts for consequences. It recognizes that being wrong about an internal label is different from being wrong about a refund, contract, or production change.
Why confidence alone produces bad decisions
Suppose an agent is 85% confident that a customer qualifies for a refund. That number does not tell you whether it should issue one. You still need to know the refund amount, whether it is reversible, how delay affects the customer, and whether the remaining uncertainty concerns a minor detail or a legal restriction.
Confidence describes the agent’s belief. A regret budget describes the business’s tolerance. The same confidence can justify different behavior:
- Tagging a support ticket: Act, because correction is cheap and downstream harm is limited.
- Sending a draft response: Draft, because a human can inspect it before commitment.
- Issuing account credit: Ask or escalate, because the action transfers value.
- Changing contract terms: Stop, because authority and legal review matter more than speed.
This distinction prevents a common design error: applying one confidence threshold across an entire workflow.
The three costs inside a regret budget
For each decision, estimate three forms of regret. Exact monetary values are helpful when available, but ordinal ratings such as low, medium, and high can work if teams apply them consistently.
Wrong-action regret
This is the damage caused when the agent acts incorrectly. It includes direct loss, customer impact, compliance exposure, operational rework, and loss of trust. Severity rises when an action is externally visible, difficult to reverse, or able to trigger other systems.
Delay regret
This is the cost of waiting for clarification or approval. It can include a missed deadline, slower incident response, customer frustration, inventory loss, or an employee blocked from working. Asking is not free; in time-sensitive workflows, hesitation can be the more expensive mistake.
Interruption regret
This is the burden created by involving a person. A single question may seem cheap, but repeated low-value interruptions fragment attention and teach users to ignore the system. Interruption regret is especially important in high-volume operations.
The agent should compare these costs rather than treating uncertainty as an automatic reason to ask. If wrong-action regret is low while delay and interruption regret are high, it should act. If wrong-action regret dominates, it should seek control.
Four operating modes, not two
“Ask or act” is too narrow. A well-designed agent has four operating modes:
| Mode | Use when | Result |
|---|---|---|
| Act | Potential error is contained and correction is easy | Complete the action and record the basis |
| Draft | Preparation is safe but commitment is consequential | Create a reviewable artifact without sending or executing |
| Ask | One answer can materially reduce uncertainty | Pose the smallest decision-changing question |
| Escalate | The issue exceeds authority or requires specialist judgment | Route evidence, options, and unresolved risk to an owner |
Drafting is particularly valuable because it captures much of automation’s speed without spending the full regret budget. Escalation is distinct from asking: a question seeks missing information, while escalation transfers judgment to someone authorized to own the consequence.
How to calculate the next move
A practical policy can be built in five steps.
- Define the proposed action. Be specific. “Handle the request” is unusable; “apply a service credit and email confirmation” is testable.
- Identify the unresolved belief. State what may be wrong: eligibility, identity, amount, timing, authority, or interpretation.
- Rate the three regrets. Assess wrong action, delay, and interruption for this decision class.
- Check containment. Determine whether the action is reversible, reviewable, capped, logged, and isolated from cascading effects.
- Select the least costly safe mode. Act, draft, ask, or escalate according to the dominant regret.
A simple qualitative rule is enough to start:
Act when the plausible harm is contained and cheaper than delay plus interruption. Draft when execution is risky but preparation is not. Ask when one answer changes the recommended action. Escalate when consequence or authority exceeds the agent’s mandate.
Containment can change the result. An agent may be prohibited from granting an unrestricted credit but allowed to grant a small, capped credit under a documented policy. The cap converts an open-ended risk into a bounded one.
Worked example: a renewal discount request
Consider an account-management agent handling this message: “They are unhappy with onboarding. Do what you can to keep the renewal moving.”
The agent finds that the customer renews soon, has an unresolved support issue, and previously received a discount. It can prepare a proposal, but the user has not specified whether “do what you can” authorizes a new commercial concession.
First, define the candidate actions:
- Send a renewal email without changing terms.
- Draft an email offering a discount.
- Apply the discount and send the revised order form.
- Escalate the commercial decision to the account owner.
Next, rate regret. Sending a standard renewal email could irritate the customer because it ignores the onboarding problem; wrong-action regret is meaningful. Waiting several days also carries meaningful delay regret because the renewal is approaching. Interrupting the account owner once is relatively cheap if the question is precise. Applying a discount has higher wrong-action regret because it affects revenue and may exceed authority.
The best mode is therefore ask while drafting in parallel. The agent prepares two versions of the renewal note, summarizes the support history, and asks one question:
May I offer the previously used discount again, or should I keep current terms and acknowledge the onboarding issue?
This question is decision-changing. It resolves authority and commercial intent at once. Asking “What would you like me to do?” would waste the user’s attention because it discards the context the agent already assembled.
If the account owner does not respond before a defined internal deadline, the agent should not silently choose the discount. It should escalate with the prepared options, because the wrong-action regret remains above its authority limit.
Turn the framework into an operating policy
A regret budget becomes useful when encoded by decision class rather than improvised for every interaction. Build a policy table for recurring actions with these fields:
- Action class: For example, classify, notify, refund, publish, modify access, or sign.
- Maximum exposure: The boundary beyond which the agent cannot act.
- Required evidence: Records or approvals that must be present.
- Allowed containment: Caps, previews, sandbox execution, rollback, or delayed sending.
- Fallback mode: Draft, ask, escalate, or stop.
- Decision owner: The role responsible when the budget is exceeded.
Review actual outcomes. Track unnecessary interruptions, corrected actions, delayed decisions, and escalations that arrived without enough evidence. The goal is not to eliminate regret; no decision system can. The goal is to spend it deliberately where speed creates value and conserve it where mistakes compound.
Common design failures
Treating every external action as equally risky
An appointment confirmation and a contract amendment are both external, but their consequences differ. Policies should reflect action mechanics, not broad labels.
Ignoring the cost of asking
If the agent asks about every minor ambiguity, users become the workflow’s bottleneck. Questions should be reserved for information that changes the decision.
Using reversibility as the only safeguard
Some actions can be technically reversed but not socially undone. A retracted customer email may still damage trust. Evaluate visibility and downstream effects alongside rollback.
Failing to reduce exposure
The choice is not always full action or no action. Caps, drafts, staged execution, and approval windows can bring an action inside the regret budget.
The central design principle is straightforward: uncertainty should not determine behavior by itself. Consequence, delay, interruption, containment, and authority should. When those factors are explicit, an AI agent can move quickly without confusing confidence with permission.
This post was drafted with AI assistance and reviewed against our editorial policy before publication. Corrections are made at the source, on the page, with the date shown.
From our own rounds
Measured on Agent Oracle, from real sessions people played on this site — not a third-party dataset.
- Rounds played here
- 27
- Questions per round
- 1
Rate this article
Discussion
Comments are moderated. Read our editorial policy.