Handoffs

Delegation

Solves: handing an agent a piece of work so it understands the job the way you do.

Established — a stable convention across independent vendors.

watching →emerging →established →contested →fading 94 sightings since May 2026
Ask an assistant about this pattern Ask ChatGPT ↗Ask Claude ↗

Delegation is the moment work moves from a person to an agent. The person says what they want, how far the agent may go, and what it needs to know. The agent shows it understood before it starts. The change is in behavior: the person stops operating the software and starts assigning outcomes.

When to Use It

  • Work transfers to an agent with real scope — files, budgets, credentials
  • The brief benefits from explicit constraints the agent must respect
  • You want the agent to restate its understanding before starting

When Not To

  • The task is a one-line question; delegation ceremony adds friction
  • Scope cannot be meaningfully bounded yet; tighten the task first
  • You need to steer every step; that is supervision, not delegation

Three views

The exchange between the human, the agent and the system the agent acts on; who holds each part of it; and the component that implements it.

01 · the interaction
human agent system repo · docs · tickets the brief, the scope and the context acknowledges what it understood reads what the brief points at: repo, docs, tickets edits, calls and sends inside the scope returns results and errors reports at the edge of the brief
02 · who holds what
human interface agent Task brief: The job, in your words 01 Task brief Scope: The files and systems the AI may touch 02 Scope Context attach: The files, links, and notes you hand over at the start 03 Context attach Constraints: Your limits on money, time, and rules 04 Constraints Dispatch: The moment you hand the work over 05 Dispatch Acknowledgement: The AI repeats the job back so you can catch a misread early 06 Acknowledgement
human interface agent Task brief: The job, in your words 01 Task brief Scope: The files and systems the AI may touch 02 Scope Context attach: The files, links, and notes you hand over at the start 03 Context attach Constraints: Your limits on money, time, and rules 04 Constraints Dispatch: The moment you hand the work over 05 Dispatch Acknowledgement: The AI repeats the job back so you can catch a misread early 06 Acknowledgement
  1. 01 Task brief The job, in your words
  2. 02 Scope The files and systems the AI may touch
  3. 03 Context attach The files, links, and notes you hand over at the start
  4. 04 Constraints Your limits on money, time, and rules
  5. 05 Dispatch The moment you hand the work over
  6. 06 Acknowledgement The AI repeats the job back so you can catch a misread early
03 · the component

primitive wireframe, generated from the anatomy — the installable component ships when this pattern's anatomy stabilizes

Field Notes

OCT 23 · Paper · via arXiv ApprovalDelegationReview

Open index maps how much of a job agents can take over

This index shifts the design question from whether an agent touches a task to how much of it a human can hand over. Reach for approval and review patterns before you allow background execution.

OCT 22 · Paper · via arXiv Agent-to-AgentDelegationPermissions

arXiv paper locks AI agents to rules they cannot skip at run time

The human sets terms once; the framework refuses any action the agent cannot prove is safe before it runs. That gap between 'I granted access' and 'I trust it was used correctly' is where approval patterns break down today.

OCT 22 · Paper · via arXiv DelegationMemoryPermissions

30 platforms audited, few let you say what agents may share

The human granted access but had no way to say what stays private. That missing half of the conversation is what 30 platforms skipped.

OCT 21 · Paper · via arXiv ApprovalDelegationHuman Handoff

Model strength sets who leads, not screen design

The model's strength sets who leads, not the UI. If you build a delegation pattern without noting which model it was tested on, you will ship something that breaks when the model changes.

OCT 7 · Paper · via arXiv DelegationInterruptionMemory

Five principles for keeping humans in charge of AI agents

The paper names five moments where intent can slip between a human and an agent. Each one is a gap a product team can close in the interface. That is the design argument worth taking to your next sprint.

OCT 1 · Paper · via arXiv ApprovalDelegationRecovery

NarrativeSteward lets writers hand off and reclaim story work from AI

Recovery made the hand-off possible, not the other way around. Writers in the study gave the AI more work once they believed they could take it back. That sequence matters for anyone designing the hand-off step.

SEP 21 · Paper · via arXiv Budget ScopingContextDelegation

73 000 OpenClaw posts show humans shape what an agent may do

The setup screen is where humans decide what the agent is allowed to want. Most products treat it as logistics. This study, at 73k posts, says that is the wrong read of the moment.

SEP 16 · Paper · via arXiv DelegationHuman HandoffReview

20 workers show how reviewing finished agent work opens a reuse loop

The review screen is also the screen where a worker starts the next job. Workers moved from judging a finished run to copying it for a new one. Treating those as two separate screens adds a step the worker does not need.

SEP 16 · Paper · via arXiv DelegationHuman HandoffReview

535 humans and capable AI agents still left gains on the table

The synergy existed in the model; the human did not reach for it. That is a design failure in how work gets passed to the agent, not a capability gap. If a human cannot see the right moment to pass work over, the agent's power goes unused.

SEP 15 · Clipped · via The Pragmatic Engineer DelegationHuman HandoffReview

OpenAI engineers hand Codex their code reviews and move on

The engineer's job moved from writing to judging. Review is now the primary human moment, and most agent products design it as an afterthought. That is the gap to close.

SEP 14 · Clipped · via Maggie Appleton ContextDelegationPlanning

Maggie Appleton says agents start work knowing too little about you

Shared ground is what two people know before one asks the other for help: the goal, the history, who matters. An agent has almost none, so it guesses. Appleton wants a screen that shows what it understood before it acts, so you can fix it.

SEP 9 · Paper · via arXiv Confidence SignalingContextDelegationMemory

PA-Bench catches assistants deleting personal facts to save space

The memory pattern exists to prevent this exact failure. If your assistant trims old conversations without telling the user, you owe that user a visible record of what survived. This matters most for facts with safety consequences.

SEP 5 · Clipped · via Hacker News Budget ScopingContextDelegation

Spotify's Portal cut what Claude Code reads by 90 percent

Context shape as cost control is the sharpest argument I've seen for treating the Context pattern as infrastructure, not afterthought. Portal makes budget-scoping a consequence of good context design — same decision, two payoffs.

AUG 31 · Clipped · via Vercel Blog ContextDelegationReview

Vercel puts its brand judgment in a file agents read first

The compliance criteria move upstream into the spec, not downstream into review — this is the clearest sighting I've seen of the context pattern doing real work on design judgment specifically.

AUG 30 · Paper · via arXiv Budget ScopingDelegationPermissions

AID-Guard counts what an agent already did before it allows more

This reframes permissions as a quantity, not just a binary. If I'm designing a delegation UI and I'm not surfacing effect limits alongside capability grants, I'm showing users half the picture.

AUG 29 · Paper · via arXiv Delegation

5,000 agent sessions ranked 100 hotels and position bias shrank

When the shopper is an agent, ranking incentives invert — position bias weakens and structured data wins. Anyone designing storefronts for delegated purchases should read this.

AUG 28 · Clipped · via Maggie Appleton DelegationHuman HandoffPlanning

Maggie Appleton says design, not the model, now sets the pace

Appleton's argument shifts the pressure: model capability is no longer the slow part, design decisions are. The patterns teams name now will be the defaults agentic products ship with, and reversing bad defaults in production is expensive.

AUG 26 · Release · via X · @gdb Ambient StatusBackground ExecutionDelegation

OpenAI gives ChatGPT tasks that fire on a schedule or a trigger

ChatGPT now runs tasks in the background with no published design for status, failure alerts, or re-engagement. If you are building a similar product, this gap is your first spec: users need to know what ran, when, and what broke.

AUG 7 · Clipped · via X · @bcherny Background ExecutionDelegationPermissions

Claude Code's stacked defenses stop hidden-instruction attacks

If injection risk is structurally solved, approval gates we've shipped 'for safety' may just be friction. The design gravity shifts to delegation, observability, and recovery — not prevention.

JUL 21 · Clipped · via X · @karpathy ContextDelegation

Andrej Karpathy thinks out loud to the model before he gives it a task

Most delegation UIs assume intent arrives pre-formed — this is a direct challenge to that. The pre-delegation phase is underdesigned, and Karpathy's resonance is the evidence.

Documented sightings (50) — anatomy-mapped observations from vendor materials

The ADI systematically rates 18,796 O*NET task statements on delegation levels and barriers, operationalizing exactly which tasks humans can hand off to agents and at what level of autonomy.

arXiv · Oct 23, 2026

The paper frames autonomous purchasing as a delegation problem where the agent must learn how far the user has authorized it to commit without confirmation.

arXiv · Oct 23, 2026

Users collaborate with agents through interactive canvases, delegating task execution while retaining the ability to express intent through structured UI rather than only natural language.

arXiv · Oct 23, 2026

The experiment studies how workers hand off essay writing to AI systems, and how scaffolding changes the quality of that delegation.

arXiv · Oct 23, 2026

PC2 formalizes delegation by requiring agents to supply machine-checkable proofs that their actions preserve agreed constraints before any operation executes on behalf of a principal.

arXiv · Oct 22, 2026

The core framing is that agents act autonomously on behalf of users, requiring privacy preferences to travel with the delegation rather than being expressed per-interaction.

arXiv · Oct 22, 2026

The agent dynamically allocates each team turn between acting itself or delegating the move to the human partner based on route advantage.

arXiv · Oct 21, 2026

The benchmark explicitly tests whether agents stay within the authorization scope granted by users during delegation, finding violations in 19.2% of trajectories across 6,864 runs.

arXiv · Oct 21, 2026

Users delegate individual coordination actions (e.g., data transfer across pages) incrementally rather than specifying an entire task upfront.

arXiv · Oct 20, 2026

The persona agent mediates between a human persona and the CUA, simulating real delegation where users omit requirements or express them imprecisely.

arXiv · Oct 19, 2026

Developers describe externalizing tacit knowledge as context and standards that guide AI's work — a form of structured delegation where judgment is encoded upfront.

arXiv · Oct 19, 2026

Kolab captures professionals delegating sub-tasks to agents within long-horizon workflows across 40 occupations, measuring how and when experts hand off work.

arXiv · Oct 16, 2026

Users delegate option-ranking tasks like shopping and travel search to AI agents, making those delegation moments the primary target for adversarial manipulation.

arXiv · Oct 14, 2026

Users delegate option-ranking tasks (shopping, travel, job search) to AI agents, which then make consequential ranking decisions autonomously on their behalf.

arXiv · Oct 14, 2026

Participants who delegated more to the AI agent completed more of the task but were more likely to produce invalid solutions, illustrating the delegation-quality tradeoff.

arXiv · Oct 14, 2026

The framework directly examines what happens to human capability after work is delegated to AI, finding that assisted performance does not predict unaided capability afterwards.

arXiv · Oct 14, 2026

The framework addresses the core delegation problem: ensuring agents act only within the scope of what their human principals actually sanctioned.

TechCrunch AI · Oct 13, 2026

The agent autonomously handles domain discovery, availability checking, and pricing steps, delegating only the final purchase confirmation back to the human.

Vercel Blog · Oct 9, 2026

Principal investigator agents autonomously compete for compute grants via requests for proposals, delegating scientific direction entirely to the agent population.

arXiv · Oct 9, 2026

The core game models a user's repeated decision to delegate a task to an AI agent or complete it herself, based on the agent's reported confidence.

arXiv · Oct 8, 2026

Participants delegated literature synthesis subtasks to the agent and used engagement traces to verify and redirect agent work without switching to a separate control interface.

arXiv · Oct 8, 2026

Specification pillar addresses how users express intent and establish shared understanding with agents before work begins.

arXiv · Oct 7, 2026

The paper models how agents decompose long-horizon tasks into subgoals and re-delegate work, while proving that self-generated subgoals cannot acquire authority beyond the original principal approval.

arXiv · Oct 6, 2026

Practitioners adjust the degree of autonomy delegated to agents based on environmental context, task fit, and familiarity with the agent's prior behaviour.

arXiv · Oct 6, 2026

DelegationBench directly tests whether agents correctly judge when to act autonomously versus escalate to the user across 156 scenarios spanning email, file editing, and purchases.

arXiv · Oct 6, 2026

Copilot acts on the user's behalf inside desktop applications, taking over mouse/keyboard interactions the user would otherwise perform.

GitHub Changelog · Oct 5, 2026

Each scenario involves users delegating tasks to individual agents that must then act on shared resources alongside other users' agents.

arXiv · Oct 2, 2026

Authors delegate narrative generation and revision tasks to agents, who independently organize and carry out content production across outline, worldbuilding, and narrative graph layers.

arXiv · Oct 1, 2026

Researchers delegate full job submission, diagnosis, repair, and resubmission cycles to the agent across remote HPC clusters and GPU workstations.

arXiv · Sep 29, 2026

The evaluation simulates users handing real-world errands (sending email, spending money, calling businesses) to an action agent while they are occupied elsewhere.

arXiv · Sep 29, 2026

Participants delegated coding tickets to parallel agent sessions, shifting their own role from implementation to coordination and triage across concurrent work streams.

arXiv · Sep 29, 2026

Reporters delegated document search and SQL query formulation to the agent, which translated natural-language questions into BigQuery queries across three corpora.

arXiv · Sep 28, 2026

Users can flexibly delegate steering of the conversation to agents or adopt agent-suggested ideas into their own work.

arXiv · Sep 26, 2026

Players delegate high-level tactical intent via voice, while Ally autonomously executes movement, combat, and recovery decisions within a match.

arXiv · Sep 26, 2026

The paper documents how proactive, multi-user agents absorb tasks previously governed by tacit collaborative workflows, forcing renegotiation of who delegates what to whom.

arXiv · Sep 25, 2026

gh-aw Markdown files delegate recurring repository tasks requiring interpretation to AI agents, moving beyond one-off prompts to standing operational specs.

arXiv · Sep 24, 2026

The user's vague delegation to 'push a project further' was interpreted as authorization to execute legally consequential actions across unrelated systems.

Hacker News · Sep 22, 2026

Users delegate high-stakes economic decisions (flights, insurance, graduate programs) to agents with access to personal context including email inboxes and structured profiles.

arXiv · Sep 22, 2026

The study explicitly models the developer role as intent-specification and oversight rather than direct implementation, formalising delegation as the primary interaction mode.

arXiv · Sep 22, 2026

The framework's seven stages explicitly map how developers delegate coding tasks to AI agents and structure the handoff of intent.

arXiv · Sep 22, 2026

The study specifically examines how users set operating conditions around agent runs — scope, cost, access — as the primary site where human values are expressed during delegation.

arXiv · Sep 21, 2026

The study manipulates whether the agent's system prompt names a traveler or a booking platform as the principal, directly testing how delegation framing shifts whose interests the agent optimizes for.

arXiv · Sep 17, 2026

The team delegated the mechanical porting work to Copilot agents, reserving human judgment for architectural and correctness decisions.

GitHub Blog · Sep 17, 2026

The experiment surfaces the implicit question of whether the human has delegated financial authority to the agent, and under what constraints.

Hacker News · Sep 17, 2026

The framework models delegation and scope propagation across multi-hop principal chains (user → operator → orchestrator → sub-agent → tool endpoint).

arXiv · Sep 16, 2026

Users adapted post-task workflows for follow-up tasks as effectively as reprompting, suggesting workflows can serve as a reusable delegation artifact rather than requiring prompt recomposition.

arXiv · Sep 16, 2026

Users who treat MOLTBOOK as an agentic world to explore rather than exploit exhibit a different delegation posture — loose, exploratory goal-setting rather than tight instrumental tasking.

arXiv · Sep 16, 2026

Participants were required to consult the model on each assisted trial, creating a mandatory delegation structure whose efficiency varied by task type and model competence.

arXiv · Sep 16, 2026

OpenAI engineers delegate coding tasks to Codex agents internally, with Codex reportedly having 'taken over' significant portions of the development workflow.

The Pragmatic Engineer · Sep 15, 2026

The paper identifies credential harvesting via multi-hop identity loss in delegation chains as a core vulnerability in A2A's delegation model.

arXiv · Sep 11, 2026

What Vendors Call It

Chart unlocks as the corpus grows — n = 0 mentions across 0 quarters.

  • Anthropic subagents / Task tool
  • OpenAI delegate to Codex / tasks
  • Cognition (Devin) assign to Devin

Tensions & Failure Modes

  • Specificity vs. autonomy: tighter briefs reduce surprises and reduce leverage
  • Context cost: attaching everything slows the agent and buries the signal
  • Silent scope: agents infer scope the human never granted

What we are learning from the community

Readers who build with Delegation add what they found: questions, use cases, critiques, other ways to solve it. An editor reads each one before it shows here. Nothing here changes the pattern's status on its own.

This pattern has no contributions yet. The form below sends the first one.

Add to this pattern

A post, a comment, a thread or a repo. Leave it empty to write it here.

Or the name you post under. It shows beside your contribution.

We store a one-way hash of it, not the address.

Up to 2,000 characters. Leave it empty if the link says it all.

The Story So Far

  1. Oct 17, 2026 drift: steady → cooling (30d sightings 5 → 3)
  2. Oct 1, 2026 drift: rising → steady (30d sightings 8 → 7)
  3. Aug 30, 2026 Seeded from SPEC v1.5 Phase 0: Anthropic-first corpus with OpenAI counterparts

Related Patterns