OpenAI Engineer Urges Read-First Rollout for Enterprise AI Agents

Beyond the Prompt: Building AI Agents to Automate Enterprise Workflows With OpenAI — Ai4

Ai4

Enterprises must implement a read-first strategy before granting autonomous execution rights, enabling proactive AI agents embedded in shared workspaces to safely triage incidents and resolve tickets under human oversight.

AI-assisted summary of Beyond the Prompt: Building AI Agents to Automate Enterprise Workflows With OpenAI — original source. Check the original for full context.

Source published:

Detailed notes

## Background Published on YouTube by the Ai4 channel on August 17, 2026, this presentation features Dikshit Khandelwal, Member of Technical Staff in Platform and Security at OpenAI. The session outlines practical architectural patterns and orchestration strategies for designing autonomous enterprise AI agents that integrate across workplace tools, handle failures, and execute complex workflows with human oversight.

## TL;DR Khandelwal outlines the evolutionary shift from reactive chatbot prompts to proactive, autonomous AI agents embedded directly within team workspaces like Slack, Jira, and Linear. Using practical examples such as automated 3:00 AM on-call incident triage and internal IT service requests, he illustrates how agents can ingest alerts, analyze codebases, and draft pull requests in seconds. The architecture relies on institutional runbooks, structured agent playbooks with clear operational guardrails, and human-in-the-loop approvals. To safely introduce automation into enterprise infrastructure, he advocates for a phased 'read-first' rollout that validates model performance before granting scoped write permissions.

## Atmosphere & style The presentation carries a pragmatic, technical, and grounded tone delivered with the authentic ease of an infrastructure engineer dogfooding agentic tools in his daily OpenAI workflows. By anchoring the discussion in universally dreaded developer experiences—such as groggy 3:00 AM on-call pages and overflowing ticket backlogs—Khandelwal establishes an empathetic, relatable connection with the audience. The talk blends forward-looking excitement over multi-fold productivity gains with a disciplined, risk-conscious emphasis on security boundaries and incremental rollout strategies.

## Key takeaways - [00:04](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=4s) Enterprise automation is evolving beyond reactive, prompt-driven chatbots toward autonomous agents capable of coordinating end-to-end workflows across diverse systems. - [03:10](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=190s) Enterprises should pivot from reactive AI setups to proactive agents that continuously monitor systems, detect anomalies, and take initiative without waiting for human prompts. - [03:10](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=190s) In on-call incident response, proactive agents can isolate root causes from logs and draft ready-to-merge pull requests within seconds of an alert being triggered. - [06:11](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=371s) AI agents deliver the most value when embedded directly into existing collaborative platforms like Slack, Jira, and Linear rather than siloed inside standalone portals. - [06:11](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=371s) An effective enterprise agent runtime relies on an institutional knowledge base—including SOPs and operational runbooks—to ground planning and tool execution within company policies. - [10:07](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=607s) Deploying agents safely requires structured playbooks that explicitly define the agent's identity, allowed capabilities, scoped tool access, and hard operational boundaries. - [10:07](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=607s) High-volume IT operations, such as security exception approvals and permission provisioning, can be handled autonomously or escalated with pre-gathered context according to policy. - [12:34](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=754s) Background triage agents can process incoming support queries and service alerts in real time, dramatically reducing cognitive fatigue and preventing operational bottlenecks. - [12:34](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=754s) Software development lifecycles can be accelerated by using agents to ingest bug reports or feature requests and autonomously produce initial code modifications as draft pull requests. - [17:31](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=1051s) Organizations should adopt a staged rollout starting with a 'read-first' strategy, where the agent is limited to observing data, diagnosing issues, and proposing actions without write permissions. - [17:31](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=1051s) Execution and write permissions should only be granted incrementally after human operators validate the agent's accuracy and operational reliability under supervision.

## Detailed walkthrough ### [00:04](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=4s) From Scripting to Agents: The Shift in Enterprise Automation

Dikshit Khandelwal—who goes by DK—works on internal infrastructure, platform development, and internal device management at OpenAI. Opening his session, he explains that his central mission across enterprise operations is finding ways to drastically elevate productivity through automation. He notes that the framework he is presenting is not just an abstract enterprise strategy, but a practical blueprint anyone can apply in their daily professional life. In fact, he jokes that he practiced what he preaches by using agentic automation to build and polish the very presentation slides he is delivering.

Tracing the evolution of modern computing, Khandelwal reminds the audience of the arc from bare-metal programming to contemporary AI. Decades ago, developers started in assembly language before advancing to compiled C and interpreted languages like Python. A few years ago, the ecosystem shifted dramatically with the advent of ChatGPT and prompt-driven interfaces, where users ask questions and get instant, useful answers. However, technology has now entered the "agentic" era. An agent is fundamentally different from a standard conversational chatbot. Rather than merely fetching an answer or returning a block of code upon command, an agentic system is designed to execute end-to-end workflows across diverse systems—analogous to autonomously coordinating an entire dinner rather than merely retrieving a recipe.

- **Speaker Role:** Dikshit Khandelwal (DK), Platform & Security / Internal Infrastructure at OpenAI. - **Technology Arc:** Assembly language $\to$ C $\to$ Python $\to$ Prompted Chatbots (ChatGPT) $\to$ Autonomous Agentic Workflows. - **Core Philosophy:** Moving past reactive Q&A toward autonomous task execution across enterprise tools.

---

[03:10](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=190s) The Proactive Agent: Redefining the 3:00 AM On-Call Incident

The traditional posture toward AI in enterprise settings has been fundamentally reactive: a customer or an employee faces an issue, prompts a chatbot, copies the output, and pastes it into an external tool. Khandelwal argues that organizations need to flip this paradigm on its head into a proactive stance. Instead of waiting for a human to instruct the model step-by-step—asking it to write a specific script or diagnose a known bug—a proactive agent continuously observes the operating environment, understands contextual background, recognizes when a request or an anomaly lands, and takes initiative.

To demonstrate the power of proactive workflows, Khandelwal points to the universal dread of engineering on-call rotations. Typically, an engineer is paged by an alerting system at 3:00 AM, stumbles out of bed, opens their laptop, and spends grueling minutes or hours sifting through thousands of log lines trying to deduce what broke. In a proactive agentic setup, the incoming alert immediately triggers an automated agent. Long before the engineer even opens their laptop lid—within 15 to 20 seconds—the agent has parsed the logs, traced the root cause, reviewed the affected codebase, and prepared a pull request with a complete summary and proposed fix. All that remains for the human is to provide a final review and click approve to ship the patch to production.

```mermaid flowchart LR accTitle: Incident Response Workflow Comparison subgraph Reactive["Reactive Approach"] direction TB R1["3:00 AM Incident Page"] --> R2["Engineer Wakes & Logs In"] R2 --> R3["Manual Log Sifting"] R3 --> R4["Manual Root Cause Analysis"] R4 --> R5["Draft Code Fix"] end subgraph Proactive["Proactive Agentic Approach"] direction TB P1["3:00 AM Incident Page"] --> P2["Agent Ingests Alert & Logs"] P2 --> P3["Root Cause Isolated"] P3 --> P4["PR & Summary Generated"] P4 --> P5["Human Approves & Ships"] end ```

---

[06:11](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=371s) The Architecture of a Shared Human-AI Workspace

Moving beyond single-user conversational plugins requires inviting AI agents directly into the shared workspaces where teams already collaborate. Rather than forcing employees to switch contexts to interact with an AI interface, the agent joins platforms like Slack, Jira, or Linear as an active teammate. By living inside the communication channels and project boards where work originates, the agent observes ticket creations, customer requests, and team discussions in real time, executing the necessary background investigation and updating work objects dynamically.

Khandelwal outlines the high-level architecture that enables this collaborative loop. It begins with incoming requests captured as work objects inside the shared environment. From there, the agent accesses an institutional knowledge base—consisting of internal documentation, standard operating procedures (SOPs), and operational guidelines—to ground its actions in organizational standards. Armed with contextual awareness and predefined tool permissions, the agent runtime initiates a loop of planning, executing, verifying, and learning. If a task requires human intervention or policy enforcement, the agent pauses the ticket, changes its status to awaiting review, and accepts human feedback directly within the shared thread.

```mermaid flowchart TD accTitle: Shared Human-AI Workspace Architecture subgraph Collaboration["Shared Collaborative Surface"] A["Workspace Triggers: Slack, Jira, Linear"] end subgraph CoreRuntime["Agent Runtime Engine"] B["Work Object Ingestion"] C["Planning & Context Synthesis"] D["Execution & Tool Interaction"] E["Outcome Verification & Retries"] B --> C --> D --> E end subgraph Guardrails["Governance & Context"] KB["Knowledge Base: SOPs & Internal Docs"] Tools["Scoped Tools & Enterprise APIs"] Human["Human-in-the-Loop Review"] end A --> B KB --> C Tools --> D E --> Human Human -- "Approved / Feedback" --> A ```

- **Collaborative Embedding:** Integrating agents directly inside Slack channels, Jira boards, and Linear projects rather than isolated portals. - **Knowledge Base Layer:** Incorporating runbooks, standard operating procedures (SOPs), and architectural documentation to constrain actions to approved procedures. - **Execution Loop:** Work object ingestion $\to$ context planning $\to$ tool interaction $\to$ verification $\to$ human sign-off.

---

[10:07](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=607s) Implementing Guardrails: Playbooks, Personas, and IT Requests

Khandelwal draws an analogy between configuring an autonomous agent and "nurturing a baby." An agent cannot simply be turned loose inside an enterprise infrastructure without a rigorously defined identity, explicit operational skills, and clear guardrails. At OpenAI, this is achieved through structured agent playbooks. A playbook establishes the agent's identity ("who am I?"), defines its explicit duties ("what can I do?"), catalogs the external microservices and tools it is allowed to interact with, and establishes strict boundaries around what actions it must never attempt autonomously.

He illustrates this with internal IT service desks, which regularly receive high volumes of repetitive inquiries regarding malfunctioning hardware, missing software permissions, active directory or group memberships, and security exceptions. Under an agentic model, an agent sits in the intake Slack channel, parses incoming requests, cross-references security guidelines and approval chains, and determines whether an exception can be safely granted. If the security criteria are fulfilled, the agent interacts with back-end enterprise services to apply the permission change autonomously; if policy requires escalation, it gathers context and routes the ticket to human security administrators with all necessary background details attached.

- **Playbook Fundamentals:** - *Identity:* Explicit definition of the agent's persona and purpose. - *Capabilities & Skills:* Catalog of specific tasks the agent is trained to execute. - *Tool & Service Access:* Scoped integrations with internal APIs and administrative tools. - *Boundaries & Guardrails:* Explicit constraints on unauthorized data access or sensitive operations. - **Practical IT Use Cases:** Managing security exception approvals, assigning group access permissions, and diagnosing broken workplace hardware.

---

[12:34](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=754s) Autonomous Incident Triage and the Software Lifecycle Loop

Returning to developer workflows, Khandelwal describes his own setup within OpenAI's Codex ecosystem. As an infrastructure engineer, he regularly encounters internal support pings, review requests, and service pages. Rather than letting unread notifications accumulate, he runs continuous background agent workflows. When an alert arrives, the agent immediately analyzes the incident, conducts root-cause investigations across historical logs, gathers the relevant code context, and prepares an action plan before he has even viewed the message. This automated triage saves critical minutes during outages and eliminates the cognitive burden of manual log analysis.

He expands this concept to product management and application development using the example of a food recipe application. Once deployed, an agent can manage both feature enhancement and bug triage lifecycles. If a developer posts a ticket requesting support for a new cuisine, the agent inspects the code repository, plans the required architectural changes, implements the feature, and submits a pull request for human review. Similarly, if an end-user submits frustrated feedback about an application glitch, an automated workflow ingests the report, isolates the reproduction steps, patches the bug, and pushes a proposed fix directly into the review pipeline. Implementing these continuous proactive loops has made Khandelwal approximately "5X more productive," preventing communication blind spots where unaddressed messages could otherwise languish for weeks.

- **Codex Background Workflows:** Automatically running research, log evaluation, and triage on incoming peer queries and operational alerts. - **Continuous Feedback Loop:** Converting raw user feedback and error reports into actionable pull requests without manual developer mediation. - **Productivity Acceleration:** Claimed 5x efficiency gains by delegating administrative triage, context gathering, and initial draft PRs to agents.

---

[17:31](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=1051s) Scoped Rollout: Adopting a "Read-First" Enterprise Strategy

In his concluding remarks, Khandelwal offers guidance for organizations looking to adopt agentic workflows without introducing security or operational risks. He warns that granting autonomous agents unrestricted write permissions from day one is dangerous: "Because if you don't do scoped actions, you all know what's going to happen." Instead, enterprises should approach implementation through a structured, staged rollout.

Teams should begin by targeting a single, high-friction workflow that wastes significant manual effort. The recommended rollout begins with a "read-first approach," where the agent is granted permission only to ingest context, observe tickets, scan logs, and synthesize diagnostic summaries. During this phase, the agent presents findings and proposed resolutions to human operators for validation. As confidence in the agent's accuracy and stability grows over time, administrators can progressively expand its permissions to execute scoped actions—such as modifying configuration files, granting standard permissions, or publishing pull requests. By closing the loop with continuous monitoring and outcome verification, organizations can build secure, resilient agents that reliably reduce workflow friction.

- **Implementation Step 1:** Identify a single repetitive, friction-heavy business or engineering workflow. - **Implementation Step 2:** Deploy the agent under a strict "read-first" policy to observe data, summarize context, and propose actions without execution authority. - **Implementation Step 3:** Validate model accuracy and establish operational confidence through human oversight. - **Implementation Step 4:** Gradually grant carefully scoped write and execution permissions behind strict boundary constraints.

## Notable quotes > moving from a simple AI interaction to an agent that can reliably complete real-world work requires thoughtful orchestration, clear workflows, and effective human oversight. — Dikshit Khandelwal

> Through a synthetic demonstration, I will illustrate how an agent can interpret an employee request, build a plan, coordinate actions across enterprise tools, incorporate human approval where appropriate, handle partial failures, verify outcomes, and report results back to the user. — Dikshit Khandelwal

> move beyond the prompt and build AI agents that reduce workflow friction, automate repetitive processes, and make enterprise work faster and more reliable. — Dikshit Khandelwal

> [10:07](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=607s) nurturing a baby — Dikshit Khandelwal

> [10:07](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=607s) who am I? — Dikshit Khandelwal

> [10:07](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=607s) what can I do? — Dikshit Khandelwal

> [12:34](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=754s) 5X more productive — Dikshit Khandelwal

> [17:31](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=1051s) Because if you don't do scoped actions, you all know what's going to happen. — Dikshit Khandelwal

> [17:31](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=1051s) read-first approach — Dikshit Khandelwal

## Mentioned Dikshit Khandelwal, OpenAI, Ai4, ChatGPT, Codex, Slack, Jira, Linear, Python, C, Assembly language

## Video description Dikshit Khandelwal - Member of Technical Staff, Platform and Security, OpenAI

AI agents have the potential to transform how enterprises automate complex workflows that span multiple systems, tools, and teams. But moving from a simple AI interaction to an agent that can reliably complete real-world work requires thoughtful orchestration, clear workflows, and effective human oversight. Through a synthetic demonstration, I will illustrate how an agent can interpret an employee request, build a plan, coordinate actions across enterprise tools, incorporate human approval where appropriate, handle partial failures, verify outcomes, and report results back to the user. Attendees will learn practical patterns for designing enterprise agents, including workflow orchestration, human-in-the-loop interactions, tool integration, failure handling, retries, outcome verification, and observability. Join this session to learn how organizations can move beyond the prompt and build AI agents that reduce workflow friction, automate repetitive processes, and make enterprise work faster and more reliable.

[Source](https://www.youtube.com/watch?v=WbgJtYCpWn4)

中文简报

OpenAI工程师建议企业AI Agent推行“只读优先”部署模式 企业在授予自主执行权限之前必须实施只读优先策略,从而让嵌入共享工作区的主动型AI Agent能够在人工监督下安全地分类事件并解决工单。 Khandelwal概述了从被动响应的聊天机器人提示词,向直接嵌入Slack、Jira和Linear等团队工作区的主动、自主AI Agent的演变。通过自动化处理凌晨3点的待命事件分类和内部IT服务请求等实际案例,他阐述了Agent如何在数秒内接收警报、分析代码库并草拟Pull Request。该架构依赖于机构运维手册、具备明确操作护栏的结构化Agent操作规程,以及人在回路的审批机制。为了将自动化安全引入企业基础设施,他主张推行分阶段的“只读优先”部署,在授予有范围限制的写入权限之前先行验证模型性能。 企业自动化正在超越被动、提示词驱动的聊天机器人,迈向能够在不同系统间协调端到端工作流的自主Agent。 (0:04) 企业应当从被动型AI架构转向主动型Agent,使其能够持续监控系统、检测异常并主动采取行动,而无需等待人工提示。 (3:10) 在值班应急响应中,主动型Agent能在警报触发后的数秒内从日志中定位根本原因,并草拟出可直接合并的Pull Request。 (3:10) 当AI Agent直接嵌入Slack、Jira和Linear等现有协作平台,而不是被孤立在独立门户中时,才能发挥最大价值。 (6:11) 高效的企业级Agent运行时依赖于机构知识库(包括SOP和运维手册),从而使规划和工具执行严格遵循公司策略。 (6:11)

Reading summary

Dikshit Khandelwal of OpenAI argues that enterprise automation is transitioning from reactive conversational prompting to proactive AI agents integrated directly into collaborative workspaces. Under this model, agents continuously observe systems, cross-reference operational procedures, and prepare interventions for human approval before manual triage even begins. From Reactive Prompting to Proactive Incident Response (3:10) Traditional enterprise artificial intelligence relies on a reactive posture where employees prompt a chatbot and manually transfer outputs across external tools. Khandelwal advocates shifting to a proactive architecture in which autonomous agents continuously observe operational environments, interpret context, and act upon anomalies without awaiting explicit human instructions. To demonstrate this difference, Khandelwal highlights engineering on-call rotations. When an incident occurs at 3:00 AM, a reactive response requires an engineer to wake, log in, and manually inspect thousands of log lines. In contrast, an automated agent ingests the alert immediately, isolates the root cause, reviews the repository, and drafts a pull request with a proposed fix within 15 to 20 seconds, leaving the engineer solely to evaluate and approve the deployment. Embedding Agents and Playbooks in Shared Workspaces (6:11) Rather than forcing users into separate AI interfaces, Khandelwal recommends introducing agents as active teammates within shared collaboration surfaces like Slack, Jira, or Linear. Operating within these tools, the agent ingests work items, grounds its actions in organizational documentation and standard operating procedures (SOPs), and executes an operational loop of planning, tool use, verification, and feedback. If policy requires human sign-off, the agent pauses and requests guidance directly within the shared thread. To ensure control, Khandelwal emphasizes establishing structured playbooks that define the agent's identity, allowed capabilities, accessible microservices, and hard boundaries. In internal IT service desk environments, an agent can parse employee inquiries regarding permissions or hardware, autonomously implement standard changes that satisfy security criteria via back-end enterprise APIs, and escalate ambiguous or sensitive requests to human administrators with gathered context. Autonomous Triage Across the Software Lifecycle (12:34) Continuous background agents can also automate developer support triage and feature delivery. Working within OpenAI's Codex ecosystem, Khandelwal runs background workflows to investigate alerts, evaluate historical logs, and draft resolution strategies before opening peer inquiries or alerts. He reports that delegating administrative triage, context gathering, and initial pull request drafting has made him approximately five times more productive. This continuous loop applies across the broader application lifecycle. Using a recipe application as an illustration, Khandelwal shows how an agent can ingest feature requests or bug reports, determine code changes, implement modifications, and submit a pull request for human review. This structure converts incoming telemetry and user feedback directly into actionable code updates without manual developer intervention at the triage stage. Mitigating Operational Risk with Read-First Deployments (17:31) Granting autonomous agents broad write permissions across corporate infrastructure poses significant security and operational risks. Khandelwal warns against deploying fully autonomous agents immediately, urging organizations instead to start with a single, high-friction workflow. He recommends adopting a phased rollout centered on a "read-first" posture. In this initial stage, the agent is restricted to observing tickets, scanning logs, and producing diagnostic summaries for human review. Once monitoring verifies the model's accuracy and stability, administrators can progressively expand permissions to execute scoped write actions, such as altering configuration files, granting permissions, or submitting code. Khandelwal concludes that shifting to proactive agents enables significant efficiency gains, but successful adoption requires constraining systems through structured playbooks and staged permissions rather than granting unmonitored write access.

精炼阅读摘要

OpenAI 平台与基础设施工程师 Dikshit Khandelwal 提出,企业自动化正从单次提示词驱动的被动问答转向能够自主跨系统协作的主动式智能体(AI Agents)。他认为企业应将智能体直接嵌入团队工作流,并通过“只读优先”与严格的作用域边界,在确保安全的前提下实现端到端任务自动化。 从被动问答转向主动式智能体 (0:04) Khandelwal 梳理了现代计算从汇编语言、C、Python 到提示词对话界面的演变,指出当前企业 AI 应用多处于被动响应状态:员工遇到故障或需求后向聊天机器人提问,再手动复制生成内容并粘贴到外部工具中。他主张企业转向主动式模式,让智能体持续监测环境状态并在事件发生时主动执行端到端流程,如同自主筹办一整场晚宴而非仅仅查询食谱。 以工程运维常见的凌晨 3 点告警为例,传统流程中工程师需要被叫醒并耗费大量时间逐行排查日志;而在主动式智能体架构下,告警触发后智能体可在 15 至 20 秒内自主完成日志解析、根因定位、代码库审查,并生成附带修复建议的 Pull Request(PR),人类工程师仅需对最终修复方案进行审核与批准。 协作工作区:嵌入既有团队平台 (6:11) 为了避免员工在独立 AI 交互界面之间频繁切换上下文,Khandelwal 建议将智能体直接引入团队已有的协作平台,如 Slack、Jira 或 Linear,使其作为常规团队成员参与日常工作。智能体在沟通频道和项目看板中实时监测新工单、用户请求与技术讨论,并动态更新对应的工作对象。 该协作架构的核心运行时包含“规划、执行、验证与持续学习”的闭环。智能体通过企业内部知识库(包括标准作业程序 SOP 与系统架构文档)获取上下文,依据预设权限调用企业内部工具与 API 接口。若任务涉及高敏感策略或需要人工确认,智能体会主动挂起工单,直接在原讨论线程中向人类员工请求审批或反馈。 运行守则:构建智能体身份与安全边界 (10:07) Khandelwal 将自主智能体的配置比作“培育幼童”,强调严禁在缺乏约束的情况下将其直接接入企业基础设施。OpenAI 内部采用结构化“运行守则”(Playbooks)对智能体进行规范,明确界定其身份定位、获准执行的具体技能目录、可调用的微服务与工具,以及绝对禁止自主尝试的高危操作边界。 在日常 IT 服务台场景中,智能体能够接管大量重复性诉求,例如硬件故障排查、组权限变更及安全例外申请。智能体常驻进件工单频道,解析员工请求并交叉比对安全规范与审批链;若符合既定标准,智能体可自主调用后端企业服务实施权限变更,若遇到超纲权限则自动整理完整的上下文信息,将工单上报转交人工管理员。 研发流程闭环:从告警分流到自动化补丁 (12:34) 在日常软件研发与运维工作中,Khandelwal 指出持续运行的后台智能体能够有效降低认知负荷。他在自身基础设施运维与 OpenAI Codex 工作流中运用该模式,在收到同行咨询或服务告警时,由智能体在后台先行开展历史日志排查、代码上下文收集并草拟行动方案,Khandelwal 声称这一做法使其个人生产力提升了约 5 倍。 该机制同样覆盖了从用户反馈到功能交付的完整生命周期。以餐饮食谱应用为例,当开发人员提出新功能需求或最终用户提交缺陷报告时,智能体能够自动提取复现路径、审查代码库、实施改动并推送待审核的修复 PR,从而消除因消息积压而导致工单滞留数周的沟通盲区。 防范操作风险:“只读优先”的分级授权 (17:31) 针对企业在部署自主智能体时面临的数据安全与系统误操作担忧,Khandelwal 警告称,首日便授予智能体无限制的写入权限具有极高风险。他建议企业采取分阶段实施路线,首先聚焦于单一且耗费大量人工精力的摩擦环节。 实施的第一阶段应采取严格的“只读优先”(Read-First)策略:智能体仅被允许摄取上下文、监控工单、扫描日志并输出诊断分析与解决建议,所有执行操作均交由人工审核确认。待模型准确率和稳定性在实际运行中建立起充分信任后,管理团队再逐步放开受严格限制的写入权限,允许其执行修改配置文件、授予常规权限或发布代码分支等操作。 Khandelwal 论证了主动式智能体在提升企业交付效率和减轻运维负担方面的潜力,但也指出其可行性完全建立在细粒度权限控制与严格运行守则之上。尽管他在个人工程场景中报告了显著的效率提升,但面对更为复杂且非标准的异常事件时,智能体能否稳定处理而不依赖频繁的人工兜底,仍是企业在全面推广中需要持续检验的现实问题。

Detailed notes — zh

## Background 本视频由 Ai4 频道于 2026 年 8 月 17 日发布在 YouTube 平台上。视频记录了 OpenAI 平台与安全团队技术成员 Dikshit Khandelwal(DK)的主题演讲,内容聚焦于如何超越传统的单点 Prompt 交互,构建具备工作流编排、工具调用、失败重试与人类监督机制的企业级 AI Agent 自动化系统。 ## TL;DR DK 在演讲中指出,企业级 AI 正在经历从“被动响应式 Prompt”向“主动执行式 Agent”的范式转变。通过将 Agent 直接嵌入 Slack、Jira 等人机共享工作区,并依托企业知识库、严格授权的工具链和自省运行时引擎,AI 可以自主认领任务、排查故障并生成代码 PR。他通过内部 IT 权限审批与基于 Codex 的凌晨 On-Call 排障等实战案例,展示了该架构如何将个人生产力提升 5 倍,并提出了从只读监听逐步过渡到受控授权的渐进式落地指南。 ## Atmosphere & style 整场演讲呈现出典型硅谷一线工程实战者的务实、幽默与严谨。DK 语言精炼且极具同理心,用“凌晨三点被报警吵醒”等生动切身的痛点引发在场工程师的强烈共鸣。演讲节奏明快、层次分明,既有前瞻性范式思考,又有落地架构与防范风险的冷静克制,为观众带来兼具启发性与可操作性的沉浸式技术分享体验。 ## Key takeaways - [00:04](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=4s) 从单点 Prompt 跃迁至主动智能体(Agentic)时代:AI 不应仅仅局限于问答式的 Chatbot,而应作为端到端自主驱动复杂业务流程的执行者。 - [02:22](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=142s) 范式转变的核心在于从被动响应转向主动执行:传统基于 Prompt 的交互依赖人类手动触发,而 Agentic 工作流能自主感知环境、预判需求并主动推进任务。 - [02:22](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=142s) 人机协同的理想形态是将前沿的主动排查与实现交由 Agent 完成,人类保留核心决策与关键审批权,而非盲目甩手。 - [05:07](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=307s) 构建人机共享工作区(Shared Human-AI Workspace):不应只是向 Chatbot 接入插件,而是将 Agent 直接拉入 Slack、Jira、Linear 等人类协作空间,赋予其观察与自主认领任务的权限。 - [07:58](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=478s) 企业级 Agent 核心架构由四大支柱构成:共享工作区与任务对象(Workspace & Work Object)、企业知识库(SOP 与文档)、工具访问控制(Tool Access)以及智能体运行时(Agent Runtime)。 - [07:58](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=478s) 闭环推理与安全防护:Agent 运行时通过“规划(Plan)→ 构建(Build)→ 测试与验证(Test & Learn)”实现反思与自我修正,同时外围必须配置刚性防护栏(Guardrails)以约束操作边界。 - [10:07](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=607s) Agent Playbook 设计方法论:如同培养孩子一样,配置 Agent 需要明确定义其身份目标(Playbook)、可调用的技能与服务权限,以及清晰的行为红线与禁区。 - [12:34](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=754s) 自动化 On-Call 排障闭环:系统警报触发后,Agent 可在数十秒内完成海量日志分析、根因定位、沙盒测试与修复 PR 创建,将工程师从繁重的排障操作解放为最终审核者。 - [15:06](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=906s) 全生命周期业务覆盖:主动工作流不仅适用于底层运维,还可覆盖从新特性研发交付到用户线上反馈与 Bug 自动热修复的完整产品闭环。 - [15:06](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=906s) 深度集成与主动触发的工作流带来了显著效能跃升,使工程师个人生产力提升达 5 倍,并有效消除了跨团队协作中的遗漏与沟通内耗。 - [17:30](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=1050s) 企业落地路线需遵循四步演进:挑选痛点切口 → 坚持只读优先(Read-First Approach) → 在复杂用例中建立置信度 → 最终放开范围化行动授权。 - [17:30](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=1050s) 刚性权限切分与人工兜底:切忌过早开放无限制写入权限,必须对工具调用进行精细化范围切分(Scoped Actions),并在关键发布与变更前强制保留人工审核环节。 ## Detailed walkthrough ### [00:04](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=4s) 讲者背景与从单点 Prompt 到工作流自动化的跃迁 来自 OpenAI 平台与安全(Platform and Security)团队的 Dikshit Khandelwal(大家都叫他 DK)开场介绍了自己的工作背景。他目前在 OpenAI 负责管理面向企业级场景的内部基础设施,核心职责涵盖平台搭建以及相关内部设备的运维管理。DK 直奔主题:在所有企业和组织中,大家面临的核心课题始终是如何提升生产力,而今天这场演讲的核心,正是分享如何利用 AI Agent(人工智能智能体)将繁杂的企业工作流实现端到端的自动化。他特别强调,今天带来的不是单一工具的宣讲,而是一套普适的基础框架(framework),不仅适用于提升企业级流程的交付效率,每个人也能将其直接应用到个人日常工作中——甚至他现场展示的精美幻灯片,大半也是利用这套自动化工作流制作完成的。 DK 带着观众梳理了技术演进的整体脉络。多年以前,软件工程经历了从汇编语言到 C 语言解释器、再到 Python 的演进;几年前,大家开始接触 ChatGPT,习惯于通过输入 Prompt 获取即时答案。虽然这种人机问答模式确实能减轻部分工作负担、提升个人效率,但它依然局限在局部交互中。企业需要思考的是:如何将这种能力扩展(scale up)并深度嵌入到服务客户与内部运转的核心业务链条中?DK 明确提出,技术已经迈入全新的“Agentic”(智能体化)时代——Agent 绝不仅仅是一个聊天机器人(Chatbot),如果仅仅停留在“你提一个问题、它回一段答案”,其价值远远没有释放。它应该像一个能为你把整顿饭做好的全流程执行者,自主驱动整个工作流的端到端闭环。 --- ### [02:22](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=142s) 范式转变:从被动响应转向主动执行的 Agent 传统基于 Prompt 的交互本质上是“被动响应(Reactive Approach)”:用户发现问题,带着具体指令去询问 ChatGPT,获取答案后再手动把方案同步给业务方或客户。而 Agentic 工作流的核心转变在于走向“主动执行(Proactive Approach)”。在这种新范式下,用户不再需要步步跟进、耳提面命地敲下“帮我写这段代码”或“帮我做这个操作”;相反,Agent 会自主感知系统环境与上下文,提前预判并主动推进任务。 DK 举了一个让现场工程师心有戚戚焉的切身体会:对于负责 On-call(轮值排障)的工程师而言,最痛苦的莫过于凌晨三点被报警寻呼机(Pager)惊醒,睡眼惺忪、头痛欲裂地去排查系统到底哪里崩了。在被动模式下,工程师必须挣扎着爬起来开电脑翻日志;而在主动 Agent 体系下,当报警触发的瞬间,Agent 已经在工程师掀开笔记本屏幕前完成了全套链路排查——它自主抓取上下文、分析故障根因,甚至把修复代码写好、打包成 Pull Request(PR),并生成了一份详尽的排障摘要。当工程师终于坐到电脑前时,屏幕上赫然写着:"我已经定位了故障原因并提交了修复 PR,只需人工审核批准即可上线部署。" 这正是当下人机协同的理想形态:人类并非将所有权限盲目甩手给 AI,而是让 AI 充当最前沿的主动执行伙伴。 ```mermaid flowchart TD accTitle: 被动响应式与主动智能体式工作流对比 subgraph Reactive["被动响应式交互 (传统 Chatbot)"] direction TB R1["系统产生故障 / 提出问题"] --> R2["人工介入登录系统"] R2 --> R3["向 AI 输入 Prompt 寻求解答"] R3 --> R4["AI 返回单点建议"] R4 --> R5["人工逐行审查并手动编写修复代码"] end subgraph Proactive["主动智能体式交互 (Agentic Workflow)"] direction TB P1["警报触发 / 捕获工单事件"] --> P2["Agent 自主分析日志与根因"] P2 --> P3["Agent 编写代码并创建 PR"] P3 --> P4["向工程师推送完整摘要与修复方案"] P4 --> P5["人类单点确认批准并自动发布"] end ``` --- ### [05:07](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=307s) 协作新形态:构建人机共享工作区 很多企业在探索 AI 时,往往只是把一堆插件(Plugins)和连接器接到底层的 Chatbot 上,让它去读取 Google Docs、Figma、GitHub、Jira、Linear 或 Slack。DK 指出,这种做法虽然能拉取到一些上下文,但根本机制依然是被动的——最终仍然需要人类反复输入指令来推动。在企业 IT 与研发环境中,每天都会涌入海量工单与故障排查需求,如果依然依赖人工触发,流程摩擦力依然巨大。 要实现真正的主动自动化,核心在于构建一个“人机共享工作空间(Shared Human-AI Workspace)”。企业不应只把工具接入 AI 窗口,而是应该主动把 AI Agent “邀请”到人类平时工作的空间中去: - 将 Agent 直接拉入 Slack 协同频道、Jira 项目看板或 Linear 任务流中,让它获得原生的“在场感”; - 赋予其观察整个频道讨论、感知任务流转与工单波动的权限; - 当系统捕捉到一个新 Bug 或需求工单时,Agent 会自主认领、启动调研、规划任务,并主动将工单状态变更为“处理中(In Progress)”; - 待其完成具体任务实现后,再将工单推至“等待人工审批(Waiting for Human Approval)”,并给人类留言:"该任务我已实现,若有任何不妥请在下方评论,我会根据反馈继续修改。" 这种深度嵌入不仅省去了人类来回同步信息的内耗,更让智能体顺理成章地承接了复杂的连贯流程,而不是机械地听一句动一下。 --- ### [07:58](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=478s) 企业级 Agent 核心架构:知识库、工具链与运行时 构建上述自动化系统的底层架构其实具备高度通用性,DK 将其抽象为一个由四大支柱构成的标准框架。无论是使用 Linear、Jira 还是 Slack,只要涉及到工单和请求处理,这套架构均可无缝套用: 1. **共享工作区与请求入口(Workspace & Work Object):** 接收来自员工或系统的初始任务对象。 2. **企业知识库(Knowledge Base):** 包含企业的标准操作程序(SOP)、架构文档、排障手册以及不同业务场景下的操作规范。Agent 依赖知识库明确“在什么情况下采用何种合规步骤”。 3. **工具访问控制(Tool Access):** 赋予 Agent 执行具体操作的能力(而非仅限于写文字或代码)。它可以在授权范围内代替人类调用 API、查询数据库或执行脚本。 4. **智能体运行时(Agent Runtime):** 作为核心推理大脑,执行“理解问题 $\to$ 规划方案(Plan) $\to$ 构建与测试(Build & Test) $\to$ 验证结果并循环改进(Repeat & Learn)”的闭环流程。 ```mermaid flowchart LR accTitle: 企业级 AI Agent 核心运行架构 subgraph Ingress["输入层"] A["共享工作区<br/>(Slack / Jira / Linear)"] --> B["工单 / 请求对象<br/>(Work Object)"] end subgraph Runtime["Agent 运行时引擎"] C["规划与分析<br/>(Plan)"] --> D["构建与执行<br/>(Build)"] D --> E["测试与验证<br/>(Test & Learn)"] E -.->|"循环优化"| C end subgraph Enablers["支撑体系"] K["企业知识库<br/>(SOPs / 文档)"] T["工具集权限<br/>(Tools & Scoped APIs)"] end B --> C K -.-> Runtime T -.-> Runtime E --> F["输出交付物 / 请求人工审批"] ``` - **任务对象化:** 任何输入请求均被标准化为结构化的任务对象送入运行时。 - **环境闭环演进:** 运行时引擎在测试失败时具备反思与学习能力,自主调整路径重试,直至达到交付标准。 - **刚性安全边界:** 必须在运行时外围配置严格的防护栏(Guardrails),约束工具的调用范围。 --- ### [10:07](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=607s) 实战落地:IT 权限审批与 Agent Playbook 设计 为了展示这套逻辑在 OpenAI 内部的实际应用,DK 分享了其团队在处理内部 IT 服务台(IT Helpdesk)请求时的真实场景。在大型组织中,IT 团队每天会被海量琐碎需求淹没:“我的设备坏了”、“我缺少某个权限”、“我机器无法正常工作”、“能否拉我进某个安全用户组”、“能否给我开一个临时豁免权(Exception Request)”。这类流程规则明确但极度耗费人工。 DK 的团队为特定权限豁免搭建了一套专门的 Agent 自动化流程。该 Agent 常驻内部 Slack 频道,实时监控进来的申请,并依据安全策略审核合规性。DK 形象地将 Agent 的配置过程比作“抚养孩子”: - **Agent Playbook(智能体剧本):** 明确定义“我是谁(Who am I)”以及“该 Agent 的设立目标是什么”。 - **技能与服务权限(Skills & Services Access):** 明确“我能做什么”、“我可以调取哪些具体服务”以及“这些服务背后的业务含义”。 - **清晰的行为边界(Boundaries):** 明确划定禁区与护栏。正如培养孩子一样,告诉它名字、兴趣与特长,并在安全边界内让其逐步演进、自主学习。 在实际流转中,当跨团队的内部请求在 Slack 触发时,Agent 自动提取背景,对照预设的 Playbook 与安全规则核验,自动调取目标服务下发豁免权限,全流程无需 IT 人员手动反复在各个控制台之间切换。 --- ### [12:34](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=754s) 深入排障实战:基于 Codex 的全自动 On-Call 闭环 DK 进一步展开了前文提到的那个令工程师深恶痛绝的“凌晨三点警报”用例。在过去,工程师被警报叫醒后的标准动作是抓起电脑、打开 Codex 或终端,茫然地敲下:“系统出事了,快帮我看看怎么回事。”但这一连串动作依然存在很长的时间延迟与认知负荷。 为此,DK 基于内部环境与 Codex 工具链构建了一套主动触发的自动化排障机制。一旦监控系统向他发出 Pager 报警: - 系统事件自动作为触发源,拉起专属排障 Agent 流程; - Agent 在工程师掀开笔记本电脑前那短短的 15 到 20 秒之内,便已主动下钻到海量堆栈中,快速扫过成千上万条底层日志; - 它迅速提炼出根本原因(Root Cause),定位缺陷代码,在沙盒中编写修复补丁并运行测试; - 最终,Agent 提炼出一份精炼的故障排障摘要,并将测试通过的修复代码打包为 GitHub PR。 当工程师在 15 分钟内彻底清醒并查看通知时,他需要做的仅仅是完成最后的“人类审核(Human Review)”。只要肉眼核对确认逻辑无误,直接一键合并发布到生产环境,故障瞬间化解。DK 总结道,这种端到端流程完全可以泛化到同事日常发来的各类协作消息上——例如代码审查请求、特定背景咨询等,后台工作流自动完成前置调研与上下文拼接,使工程师始终处于高质量的决策位,而非低效的信息检索位。 --- ### [15:06](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=906s) 全生命周期落地与 5 倍生产力跃升 为了说明该模式不仅适用于基础设施排障,还适用于完整的业务产品研发周期,DK 举了一个开发“美食菜谱应用(Food Recipe App)”的通俗示例。假设该应用已经发布上线,团队可以为其围绕构建两套自动化的工作流回路: 其一是**新特性交付闭环**:当产品经理在工单系统中提出“需要新增一个特定菜系类别”的需求时,研发 Agent 会自主解析现有工程代码库,设计出符合架构模式的代码变更,完成单元测试,并将实现方案作为待审批项推给工程师,人类只需做最后的架构确认。 其二是**用户反馈与 Bug 自动修复闭环**:当现场用户在使用菜谱软件遇到 Bug 并愤怒地在应用内提交吐槽反馈时,另一套自动化流会被即刻唤醒。Agent 会自动解析用户反馈的错误表现,重现问题、定位代码缺陷、编写修复逻辑并生成热修复 PR。从用户提交反馈到生成待发布 PR,全程无缝闭环。 DK 感慨地透露,这套深度集成、主动触发的 Agent 体系让他的整体工作效率实现了飞跃: > “这听起来可能有点不可思议,但我确信,相比过去没有 AI Agent、缺乏主动工作流的状态,我的个人生产力至少提升了整整五倍(5X)。” 他打趣地提到,如果不是依靠这套系统在后台自动监听、调研和跟进同事的消息,按照他原本的工作负荷,很多协作请求可能在被漏掉整整一个月后,他才会尴尬地给对方回复一句:“糟糕,我之前完全忘了回复你,我的锅。” --- ### [17:30](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=1050s) 实施路径指南:从只读到带权限的主动自治 在分享的最后,DK 为希望在各自企业内部落地 AI Agent 的架构师与开发者们提供了一条清晰的演进路线图。他告诫大家,切忌在一开始就给 AI 开放无限制的写入与变更权限,建立可靠工作流必须遵循渐进式节奏: - **第一阶段:挑选切口与主动编排。** 在企业中寻找痛点最明确、摩擦力最大的重复性工作流,以主动触发为目标进行流程建模。 - **第二阶段:只读优先原则(Read-First Approach)。** 刚开始上线时,严格限制 Agent 仅具备“只读”权限。让它只负责监听消息、抓取上下文、阅读日志并主动整理报告与解决方案,交由人类去执行具体写入。 - **第三阶段:逐步建立置信度(Confidence Building)。** 在大量只读运行的实例中,持续观察 Agent 针对异常与边缘用例的判断表现,校验其反思与自我修正(Self-improvement)能力是否达到预期。 - **第四阶段:范围化行动授权(Scoped Actions)。** 只有当团队对该工作流建立了高度信任之后,才逐步放开受控的写入执行权限。DK 极其严肃地提醒现场所有人:必须严格对操作权限进行精细化切分(Scope Actions),并且在最终发布与关键操作前保留人工审核关卡——“因为如果你不严格限制操作范围,大家都很清楚后果会是什么。” 在全场掌声中,DK 总结发言并鼓励大家在企业智能化转型的道路上勇敢迈出从单点 Prompt 到主动 Agent 的关键一步。他表示非常乐意在 LinkedIn 上与同行探讨更多前沿落地方案,并正式进入现场问答环节。 ## Notable quotes > [02:22](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=142s) 我已经定位了故障原因并提交了修复 PR,只需人工审核批准即可上线部署。 — Dikshit Khandelwal > [05:07](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=307s) 该任务我已实现,若有任何不妥请在下方评论,我会根据反馈继续修改。 — Dikshit Khandelwal > [07:58](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=478s) 在什么情况下采用何种合规步骤 — Dikshit Khandelwal > [10:07](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=607s) 我是谁(Who am I) — Dikshit Khandelwal > [10:07](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=607s) 该 Agent 的设立目标是什么 — Dikshit Khandelwal > [12:34](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=754s) 系统出事了,快帮我看看怎么回事。 — Dikshit Khandelwal > [15:06](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=906s) 这听起来可能有点不可思议,但我确信,相比过去没有 AI Agent、缺乏主动工作流的状态,我的个人生产力至少提升了整整五倍(5X)。 — Dikshit Khandelwal > [15:06](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=906s) 糟糕,我之前完全忘了回复你,我的锅。 — Dikshit Khandelwal > [17:30](https://www.youtube.com/watch?v=WbgJtYCpWn4&t=1050s) 因为如果你不严格限制操作范围,大家都很清楚后果会是什么。 — Dikshit Khandelwal ## Mentioned OpenAI, Dikshit Khandelwal (DK), ChatGPT, Codex, Slack, Jira, Linear, GitHub, Google Docs, Figma, LinkedIn ## Video description Dikshit Khandelwal - Member of Technical Staff, Platform and Security, OpenAI AI agents have the potential to transform how enterprises automate complex workflows that span multiple systems, tools, and teams. But moving from a simple AI interaction to an agent that can reliably complete real-world work requires thoughtful orchestration, clear workflows, and effective human oversight. Through a synthetic demonstration, I will illustrate how an agent can interpret an employee request, build a plan, coordinate actions across enterprise tools, incorporate human approval where appropriate, handle partial failures, verify outcomes, and report results back to the user. Attendees will learn practical patterns for designing enterprise agents, including workflow orchestration, human-in-the-loop interactions, tool integration, failure handling, retries, outcome verification, and observability. Join this session to learn how organizations can move beyond the prompt and build AI agents that reduce workflow friction, automate repetitive processes, and make enterprise work faster and more reliable. [Source](https://www.youtube.com/watch?v=WbgJtYCpWn4)

Source quotes

[2:22] Dikshit Khandelwal: 我已经定位了故障原因并提交了修复 PR,只需人工审核批准即可上线部署。 [5:07] Dikshit Khandelwal: 该任务我已实现,若有任何不妥请在下方评论,我会根据反馈继续修改。 [7:58] Dikshit Khandelwal: 在什么情况下采用何种合规步骤 [10:07] Dikshit Khandelwal: 我是谁(Who am I) [10:07] Dikshit Khandelwal: 该 Agent 的设立目标是什么 [12:34] Dikshit Khandelwal: 系统出事了,快帮我看看怎么回事。 [15:06] Dikshit Khandelwal: 这听起来可能有点不可思议,但我确信,相比过去没有 AI Agent、缺乏主动工作流的状态,我的个人生产力至少提升了整整五倍(5X)。 [15:06] Dikshit Khandelwal: 糟糕,我之前完全忘了回复你,我的锅。 [17:30] Dikshit Khandelwal: 因为如果你不严格限制操作范围,大家都很清楚后果会是什么。

Source quotes

Dikshit Khandelwal: moving from a simple AI interaction to an agent that can reliably complete real-world work requires thoughtful orchestration, clear workflows, and effective human oversight. Dikshit Khandelwal: Through a synthetic demonstration, I will illustrate how an agent can interpret an employee request, build a plan, coordinate actions across enterprise tools, incorporate human approval where appropriate, handle partial failures, verify outcomes, and report results back to the user. Dikshit Khandelwal: move beyond the prompt and build AI agents that reduce workflow friction, automate repetitive processes, and make enterprise work faster and more reliable. [10:07] Dikshit Khandelwal: nurturing a baby [10:07] Dikshit Khandelwal: who am I? [10:07] Dikshit Khandelwal: what can I do? [12:34] Dikshit Khandelwal: 5X more productive [17:31] Dikshit Khandelwal: Because if you don't do scoped actions, you all know what's going to happen. [17:31] Dikshit Khandelwal: read-first approach

Original transcript

[0:04] Hi everyone. My name is Dikshit Khandelwal.  You can call me DK. I currently work at Open AI [0:10] managing infrastructure internal infrastructure  for enterprises. And my major role is mostly [0:16] related to building platform and managing internal  devices for that. And I'll be presenting about how [0:24] we can automate enterprise enterprise workflows  using AI agent. And we we all work in companies [0:32] and the major goal is to improve productivity.  And how we can automate that stuff. That would [0:37] be my goal. Today the my goal is also for you  to understand that this is just a framework that [0:44] everyone can use. They can use in their actual  real life to improve their own productivity [0:49] and at the same time improving the enterprise  productivity also. So it goes every single place. [0:55] And that's how I automated most of my stuff making  these slides, you know, making it beautiful. So [1:04] All right. So just to overview how we going to  start about is first I want you to understand that [1:10] what phase are we in. We've been interacting with  AI. We hear a lot about AI how we started before. [1:17] So I want you to understand that what stage  are we in in the sense of AI what tools we [1:21] have and all that stuff. And how we how  we can utilize all of that stuff. Then [1:26] what's the idea behind how we can automate  enterprise workflows rather than just like [1:31] you know, we go to chat GPT talk to it find  the answers. That's that's cool. That's nice. [1:37] Like you know, it's helping us to improve our  productivity. We have to do less of our jobs. [1:42] So it's improving but how we can scale this up  to help our customers. Right? We have all of our [1:48] customers how we can improve their experiences and  at the same time how we be more productive towards [1:56] it. And then lastly like a little bit more of  like how we system this and how we architect this. [2:03] My goal is to, you know, just have a baseline  framework towards it. So, everyone can understand [2:09] that oh, once I'm home, like how do I build this  my own? So, that would be my goal. And in the end, [2:14] just an example that how I am using this and how  like my team uses this to automate it. So, we like [2:22] years years back, decades ago, we started with  assembly language. Then there was C interpreters, [2:27] Python. Today, like few years back, we started  with chat GPT. Today, we have like, you know, [2:32] prompted, you find answers, cool answers. I use  it every single day to automate all of my stuff. [2:38] But now we have moved into an era where everything  is agentic. And when I say agentic, it's not just [2:45] a chatbot. It is more than that. So, basically,  like today it should be interacting in a way that [2:52] hey, if you have a question, it will answer it  that simple and like a chatbot, but it should [2:56] do more than that. Uh like maybe cook food for me,  like end-to-end process. So, something like that, [3:03] it goes through a whole workflow. Rather than  just, you know, go find an answer for me. So, [3:10] the idea behind is today, like it was like more  reactive approach by, you know, finding answers, [3:17] finding solutions, and we work with our own  customers that hey, this is a thing. Like this is [3:23] the answer for you. Have we helped each other or  not? That is mostly like, you know, how I used AI [3:30] to answer someone else's question. But now  we want to take a different approach towards, [3:35] you know, using this agentic agentic workflows,  which is more of a reactive approach. Sorry, [3:41] proactive approach. Reactive was something, you  know, chatbots, I know the answer. Now proactive [3:47] approach is more of like how we run through the  whole workflow. So, instead of you going in and [3:54] saying, "Hey, can you do this job for me? Like,  write the code for me?" Instead of doing that, [3:59] I want that agent to understand that what  is the context, what is going on over here, [4:05] and being more proactive than me. So, I don't  have to say, "Hey, do this and do that." So, [4:11] agent should understand that, "Hey, oh [ __ ] like  I have this I've got this request. I need to act [4:17] on it and find some solutions." For example, like  engineers get on-call stuff. Uh 3:00 a.m. they [4:24] get pinged, paged on it, and they're like, "Oh,  damn, I have to find answer what's broken now." [4:29] Like, what if like if the agent is going by  itself finding the root cause of it and finding a [4:35] solution even before you get on your computer, and  it gives you the whole thing summary what's broken [4:39] down, and it tells you, "Hey, this is a fix.  I have a PR for you. I have this already done. [4:46] I just need a human approval so I can go ship into  production." So, that's more of like, you know, [4:51] agentic approach that we are approaching towards.  Uh so, basically, the idea is just like we are [4:57] not shifting like everything, you know, just AI  should do it. We are just working with AI today. [5:07] So, this is just an example of, you know, like  we have This is cool to have, like, you know, [5:12] I have connected all of my tools. I have like Doc,  uh Google Docs, Figma, GitHub, Jira, Linear, Slack [5:20] at one place. It's nice. It will go understand  those, find some context, but at the same time [5:26] in the end, you know, I have to tell, "Hey,  can you create this new app for me?" And also [5:32] in enterprise environments, let's say like,  uh talking about IT workflows, there are like [5:36] tons of tickets that we get in every single day to  find uh to find some solutions for their problems. [5:43] Like, I will have to go investigate things. Even  though like if I can integrate all of that stuff, [5:48] this workflows can be easily built where it the AI  agent is automatically understanding things. Oh, [5:55] I got a request and there is this issue. I already  have a lot of context from every single place. [6:01] I know I can take actions on it  with certain guardrails, of course. [6:04] And then it should go by fix it by self  if you define a workflow in a better way. [6:11] So, the core idea over here is how we take this  approach is with shared human AI workspace. So, [6:21] what I mean by that is when I when we  want to reach towards proactive approach, [6:26] we just don't want all of the plugins  and connectors come like, you know, [6:31] connected to our chatbot. We want to make  something where we can invite the AI agent to our [6:38] workspace and work with it. So, when I say, for  example, we have Jira dashboards, we have linear, [6:46] we have Slack. Like I want to invite my agent to  come inside it and act like that to understand [6:53] what's going on. Because I gave it a place  that, "Hey, now I am inside the Slack channel [7:00] itself. I know what's going on, what problems  like the I'm getting, what ticket request I'm [7:06] getting in." So, it understood that. At the  same time, the next thing is like uh just like [7:13] it it can track things. Let's say if you want  have a new bug that you want to fix, just create [7:19] it we create a ticket. There is a whole automation  workflow where it goes find things out and it will [7:25] investigate. It will plan for you. And then it can  automatically update that particular ticket. Hey, [7:32] it was in progress right now. I implemented this  task. It's waiting for a human approval now. [7:37] So, it's your job. Approve it. If you think  anything wrong, comment it on it and I will go fix [7:42] it for you. So, it's more of like I have created  a whole workflow rather than just like, you know, [7:50] I go in like telling each and every step for it to  do. All right. So, it starts with like, you know, [7:58] a shared workspace where I invite my AI agent.  This is very general thing. Uh I generalize it [8:04] very easy uh like in a small way, but this can  be anything. Uh whatever tool that you use, [8:11] it can be linear, it can be Jira, it can be Slack  channel. Wherever, you know, you get requests in, [8:16] you get tickets in. What workflow you're trying  to optimize it using AI agent. So, this is like a [8:24] just like simple high-level framework, but it  depends on, you know, person to person what [8:30] they're trying to automate it. Next thing is once  we get in a request, then we have a knowledge base [8:37] that I have lots of documentation. For example,  like everyone like if I talk about more of IT, [8:44] then we like docs, SOPs, what is the procedure in  this use case, what should I be utilizing? What [8:53] are my steps to follow? So, that's a knowledge  base. And then when I talk about tools access, [8:58] what that AI agent can perform. So, basically  today I don't want it just to answer question. [9:03] I want it to do the job for me. So, it's  like not writing code, but do things [9:09] that a user can do it on that behalf, but  with certain guidelines, of course. So, [9:15] it's up to us what workflows we are defining, and  I will give a better example like how I am using [9:20] in my own life to improve my own productivity,  and also at the same time my team's productivity. [9:28] And then like once we have that request with a  work object, it goes through our agent runtime. [9:34] It will see what's the issue that's going  on. It will plan it. It will build it and [9:39] test it out everything depending on what  workflow we have built and use that context [9:44] and at the same time repeat repeat the action. Uh  I have a slide where it says like when I repeat it [9:51] did I do a good job on it? If not, then learn from  it. So, more of like this is just another slide. [10:01] I think we can skip this one. So, a real-life  use case what what I have we've been doing is [10:07] with my team. Uh we have Slack channels. So, we  get a lot of internal request within IT that hey [10:15] I have this broken device. I don't have access to  this permission. I my machine is not working fine. [10:22] Can I get access to some random group? Can  I get a exception? All of these tasks can [10:27] be automated in a nicer way. Uh for example, uh  just for exception request. If it's a for a IT, [10:35] you get in the request. I have this AI agent which  is approved for giving exception request depending [10:41] on if security approved it or not. So, I can build  a workflow where the agent will be inside my Slack [10:48] channel looking at all of those requests what's  is incoming and depending on what skill set I [10:54] have given it, what tools access I've given it,  it will understand that and take those actions. [11:02] So, my job would be is like building a good  workflow which is secure enough and doing [11:09] its own thing what I tell it to do. Then, it will  take that request in. I have a agent playbook uh [11:17] which just defines that who am I? Like what is  this agent for? Then, I have like what can I do? [11:25] Then, what services access do I have? What uh what  is this service about? What tools access I have? [11:33] And then with certain boundaries like boundaries,  I define in the skills and playbook for that [11:39] agent. It's like a you know, you just how you  nurture a baby like, "Hey, you are this. This [11:45] is your name. You like to do this." And how  it it will evolve itself slowly slowly slowly. [11:51] So, with some boundaries of course, you know,  we we we do the same thing with children. Uh [11:57] then we have like let's say we have like team A,  team B. We have two like multiple services like we [12:02] have like lots of services we have to manage. And  to automate all of that task, it's like internal [12:08] request coming from Slack. AI agent reads it,  understands it what it needs to do. And once it [12:14] it has a context, it can go to those services  and like you know, "Give me the exception." [12:19] So, it's like I build a whole workflow towards it.  And then uh whatever the performance uh perform [12:26] action would be, it will be like that. Uh one of  the examples uh I would give over here is I uh [12:34] first talked about how So, as an engineer, I'm  an engineer. So, one of the thing that I was uh I [12:42] get pinged like 3:00 a.m. sometimes in the morning  and it's like kind of like I like to sleep. Uh so, [12:50] I wanted to automate thing where you know,  instead of just me going in, I get a page. [12:57] And I'm like, "What's broken? I have no idea."  What's the first thing I'm going to do? I'm going [13:02] to open my code X. "Hey, this is a thing going  on. Can you help me find it out what's going on?" [13:08] So, instead of doing that like I thought like why  don't I cannot automate all of that stuff when I [13:13] get a page myself? The first thing it should get  it should trigger some kind of workflow where hey, [13:20] this is I got a page. The AI agent goes, finds  some context what's broken and what's the code, [13:26] what perform actions it can take? And then,  before I open my lid in those like 15-20 seconds, [13:33] it already knows what's the core cause. The  like thousand thousands of logs I have to go [13:37] through. It can go through easily very quickly and  find the solution of it. So, it's like that and [13:45] within those 15 minutes, I have the answer. Like,  I don't have to go through all of those log. It [13:49] already did its job. All I have to do is do a  human review on it. If it's good, we ship it to [13:55] production. Like, bug bug is fixed. So, that's how  like these is This is just one example that like [14:02] we can solve, but this is more of like, you  know, we can use the same framework in enterprise [14:09] workspace or to improve your own productivity.  So, you can set up workflows where every single [14:15] messages that you're getting from your colleagues,  "Hey, can I get a review on this? Can you Do you [14:19] know more context on that stuff?" It all The  workflow automatically gets triggered. So, [14:24] I have like multiple workflows for my own  productivity within my Codex, where it keeps [14:29] running automatically. And if we get a request  in for my like specifically if I'm on call stuff, [14:36] before I even see the message, it goes in, does  the research, what's broken, or what do I need [14:44] to do, and then it will give me a whole summary of  it, what's going on, what actions I need to take. [14:51] So, that's the idea of it. Okay. So, this is  more of like workflow uh we release things, [14:59] notify, monitor, and learn from the activities  that we have done. One great example is uh [15:06] let's say you are building a app. Now, that app  does a lot of things like depending on what's [15:11] your use case is. Let's say if I'm building a food  recipe app, uh that's a product now. I build that [15:19] app, I publish it online. Done. Now, I can After  this, if I build a really good workflow around it, [15:27] then what's going to happen is I go to my ticket  tracking system. I will just say that hey, I need [15:34] to add a new feature where we, you know, where to  add a new new a different cuisine. So, it will do [15:42] its own research what what I need to do. It will  understand the whole app. And then, it will create [15:50] those changes and then send me to for approval  instead of me going in doing each and every stuff. [15:56] I give it access to different platforms I need,  uh what actions it can take and all that stuff. [16:02] Similarly, let's say someone is using from this  audience if someone is using this app for like [16:09] my own recipe thing I created, and they notice  there is a bug and they are super frustrated, [16:15] they they just report something wrong and they  comment it out on it feedback as a feedback. [16:22] It should be like, hey, it's a workflow another  workflow I built where it just reads your own [16:28] request, what's the bug in it, and it goes through  the whole loop of like, oh, I will fix this bug [16:35] and creates a PR for me and to ship it into  production. So, that's the idea behind it is uh [16:41] what I want everyone want to what I want  everyone to use it like as a framework [16:48] either to include in the enterprise workflows  or in to for your own productivity. Because [16:55] I have improved my productivity by a lot. Uh it  might sound crazy, but I believe like maybe five X [17:02] I'm more productive than what I used to be without  AI agents and more of like a proactive approaches. [17:09] And sometimes like trust me like if I didn't have  this workflow that I built, it would be like I [17:15] miss out few messages and I don't like it would be  like, "Oh [ __ ] I forgot to reply back to you." [17:21] My bad. It will be after a month. So, that's the  idea. And uh lastly just like a pick a workflow [17:31] whatever what you are trying to optimize uh within  your company or what workflow what you are where [17:37] you are trying to be productive, then think of it  like you know how you can automate this stuff. Uh [17:45] in a more proactive way where you don't  have to interact with it. And it takes [17:51] it takes approach of more proactiveness, and then  in the end when you it needs a review because [17:56] yeah, of course, we need a human review until  we reach reach all the way in the end, right? [18:02] Do that. Maybe like read read first  approach find like more proactive Hey, [18:08] this is the thing. And then once you have more  confidence on the workflow that you have built, [18:13] then we can go scope out you can you have  a permission to take actions on it now [18:18] rather than just you know telling me I me  taking help from me. And then if you see like [18:26] there is some issue with it, go improve yourself.  So, we created a whole loop building a workflow [18:32] read only secure enough and at the same time  like scoped actions what it can do because [18:39] if you don't do scope actions, you all know what  going to happen. Yep, I think that's it. Uh Uh [18:47] that's all I had, but if you have if anyone have  any questions, uh feel free to ask me, but you can [18:54] add me on LinkedIn. I love talking about different  things whatever I have, but thank you so much.