Enterprise Agentic · 观点

Enterprise Agentic · Opinion

Agentic 的边界悖论:为什么企业 Agent 项目大多失败

The Boundary Paradox of Agentic: Why Most Enterprise Agent Projects Fail

失败的根源不在模型能力,也不在工程实现,而在一个结构性矛盾:Agent 需要清晰的人机边界才能自主,而边界只能在需求被弄清楚后才出现;可一旦需求被弄清楚,它就不再需要 Agent 了。

The root cause is not model capability or engineering, but a structural contradiction: an Agent needs a clear human–AI boundary to act autonomously, yet that boundary only emerges once the requirement is understood; and once the requirement is understood, the Agent is no longer needed.

一、Agentic 的承诺,与它隐含的前提

Agentic 范式承诺两件事:一是处理动态需求,不依赖预先写死的流程,能够面对未预先定义的情况;二是发挥自主性,在一定范围内自行判断、决策、调用工具并完成任务。

但这两点成立有一个被普遍忽略的前提:设计者必须知道“动态”的范围在哪里、“自主”的边界划在哪里。 也就是要回答三个问题:哪些情况 Agent 可以自己决定?哪些情况必须停下来交还给人?判断“该自己做还是该交人”的标准是什么?

如果边界不明确,Agent 面对的是一个它无法真正理解的开放情境。此时的问题往往不是“多走一步还是少走一步”,而是更直接的失败:它持续给出错误结果,始终交不出可用的产出;严重时产生幻觉,编造事实、虚构流程,输出完全脱离现实。 到了这一步,团队既不敢让它自主,也无法靠频繁人审把它拉回正轨——因为人审的成本已经接近重新做一遍,Agent 也就失去了存在的意义。

二、为什么这个边界定义不出来

现实困境在于:连设计者自己也说不清动态需求的边界在哪里。

企业场景的需求不是项目启动时就完整存在的,它是在实施过程中逐渐浮现的。你以为要解决的是问题 A,做着做着发现真正的约束在 B,而 B 又依赖于 C 的组织流程——这些只有在落地时才会暴露。

换句话说,边界不是被“设计”出来的,是被“实施”出来的。 但 Agentic 的运行方式又要求你先把边界给它,它才能自主运行。这构成一个先后矛盾:

  • 你需要先知道边界,才能让 Agent 自主;
  • 但你只有在运行中才能知道边界;
  • 而 Agent 在边界不清时又无法可靠地自主运行。

三、AI 自身无法弥合这个缺口

如果 AI 能在运行中自己搞清楚边界,这个矛盾就能化解。但目前它做不到,原因有二。

1. 缺乏“把握度”:既无现实感知,也无承担后果的经验

企业场景里大量判断关乎分寸:这件事该不该现在做、做到什么程度算够、风险大不大、要不要升级处理。这类判断很难,难点不在信息多少,而在“度”。

需要说明的是,分寸感并不是“人在现实里”就自动具备的东西。 很多程序员同样天天身处现场,照样把度把握不好:该升级的没升级,该收口的过度设计,该停下来的继续加码。可见仅有对现实的感知还不够。资深工程师和新手看到的现实是一样的,差别在于前者为自己的判断承担过后果——做对过、做错了、被反馈过,长期下来沉淀出一种无法被完整写下来的隐性判断。

AI 在这件事上缺了两层。其一,它没有感知现实的通道,接触到的只是被转写成文本的内容,而客户的语气、现场的气氛、团队真实的负载、那些没说出口的轻重缓急,无法被完整、及时地转写进文本。其二,也是更深的一层,它没有“做出判断—承担后果—据此校准”的经验回路:它不会因为一个判断失误而真实受损,也就没有动力和素材去形成属于自己的分寸感。

所以问题不是“上下文给得够不够”,而是分寸感根本无法靠文本堆砌获得。人即使作为媒介把现实转述给它,也必须同时把那个已经被经验校准过的判断一并提供出来——而能做到这一点的人,本身就是团队里最稀缺的角色。AI 能生成答案,但无法独立判断这个答案在真实情境里是否合适、是否越界。

2. 没有真正的自我学习进化能力

人在实施中会根据反馈重构自己对问题的理解:原来这个需求不是我想的那样,下次换个做法。这是一种对问题框架本身的修正。而目前的 Agent 即使具备记忆和反馈循环,也主要是在既定框架内累积经验,难以自主发现“我对问题的理解本身就是错的”并据此重构边界。它不会在实施过程中自己长出新的职责边界。

这里说的“没有自我学习能力”,指的是不具备对问题框架的自主重构能力,而不是完全不能从反馈中调整。记忆、检索增强、微调都能让它在给定边界内变好,但边界本身仍需人来划定和修正。

四、人也在动态学习,边界因此一直在移动

实施过程对人来说同样是一个学习过程。人也是边做边明白:这个场景真正的痛点是什么;哪些环节真能交给 AI,哪些交出去一定出事;组织能接受多大程度的自主。

所以人机边界不是一次性划定的静态线,而是一条在实施中不断移动的线。人在学习、在调整预期,而 AI 跟不上这种移动——它既不感知边界已经变了,也不会自己重新对齐。

五、致命的一环:需求一旦清楚,就不再需要 Agent 了

前面的困境已经足够棘手,但还有一个更深的反讽,它让整个问题从“执行困难”变成“范式层面的自相矛盾”。

当设计者终于把动态需求摸清楚、把人机边界划出来、把流程落地下来之后,会发现这个需求已经足够稳定和结构化,完全可以用普通的程序和工作流来实施。

于是出现了一个时间错配:

  • 需求不清楚的时候,正是最需要 Agent 自主应对动态性的时候——但此时没有边界,Agent 无法可靠地自主;
  • 等需求被人的实施和学习弄清楚了,Agent 终于有了可以安全运行的边界——但此时这个边界内的事情已是确定性流程,写死的程序和工作流做得比 Agent 更稳定、更便宜、更可控。
Agentic 的边界悖论:Agent 的价值在于处理不确定,但处理不确定所需要的边界,只有在不确定性被消除之后才能给出;而一旦不确定性被消除,Agent 相对于工作流的优势也就消失了。

六、完整的失败链条

把所有环节串起来,失败是结构性的,而非执行不到位:

Agentic 需要清晰的人机边界才能自主
        ↓
边界无法在设计阶段确定,只能在实施中浮现
        ↓
实施中边界随人的学习而移动
        ↓
AI 无现实感知、无后果校准的分寸感,也不重构问题框架
        ↓
等边界终于被人和实施过程确定下来
        ↓
需求已足够结构化 → 确定性程序/工作流即可实现
        ↓
Agentic 的自主性在这个场景里已无存在必要
        ↓
真正需要自主的(不确定)阶段它做不了;
它能安全做的(确定)阶段不需要它
        ↓
项目失败,或退化成“套着 Agent 外壳的工作流”

七、这解释了一个普遍现象

很多号称 Agentic 的企业项目,做到最后实际上变成了:

  • 用大模型做几个固定节点的信息抽取或分类;
  • 用确定性工作流引擎串起这些节点;
  • 关键分支全部用规则和人审兜底;
  • 所谓“自主规划”要么被关掉,要么只在无关紧要处展示。

这不是团队能力不足,而是边界悖论的必然结果——当一个需求真的被跑通并落地,它的结构就稳定到了不需要自主性的程度。

真正能保留 agentic 形态的场景,必须同时满足两个条件:
  • 需求永远不会被完全结构化——没有确定的正确答案,也没有稳定到可以写死的流程;
  • 容错空间足够大——出错的代价可承受,不需要每个决策都正确。

开放式研究、创意生成、对系统的动态校验属于这一类。而企业核心流程的特征恰恰相反:它追求被结构化,且容错空间极小。 这意味着越是企业真正在意的核心业务,越是 agentic 自主性最不适用的地方。

八、由此得到的定位启示

如果边界不是设计出来的、而是在实施中浮现的,那么企业 Agent 项目真正的关键就不是选型、框架或模型能力,而是谁在实施过程中持续地界定人机边界。

这个界定工作贯穿项目始终,而不是一次性的前期设计或末期交接。它要在实施中不断回答两类问题:

  • 哪些环节必须由人做反馈和抉择——分寸的拿捏、后果的承担、对现实情境的判断;
  • 哪些工作可以交给 AI 实施——边界已经相对清晰、错了代价可控、结果可被验证的部分。

而且这条线会随着人对需求理解的深入而移动:今天需要人抉择的环节,明天可能因为规律被摸清而下放给 AI;今天交给 AI 的环节,也可能因为踩到新的现实情况而被收回。界定边界本身就是实施的核心内容,而不是实施开始前的一道手续。

这里有一个常被忽略的前提:这件事必须由一个具备逻辑抽象能力、能在实施中快速自主学习的人来完成。 他要能从零散的试错和反馈中提炼出稳定的判断规则,判断哪些是偶发情况、哪些会反复出现;要能识别“度”的位置,知道哪一步再往前交出去就会失控。没有这样一个角色,边界要么迟迟定不下来,要么被错误地固化,项目自然失败。这不是补上更多工程师或更大模型能替代的。

因此,对企业 Agent 的现实定位应当是:

  • 不追求一上来就部署一个自主 Agent 去跑业务。 边界未定时,完全自主必然越界;能被完全写死的流程,又不值得用 Agent。
  • 把“在实施中界定人机边界”作为项目的主线工作,由具备抽象和学习能力的人主导,Agent 作为其在边界内探索、试错、归纳的执行工具。
  • 边界随认知迭代而调整,稳定一部分就沉淀为工作流,新暴露的部分再回到人与 Agent 的协作中处理。工作流不是项目结束时的一次性产物,而是边界界定过程中持续生成的沉淀。

九、顺带一提:哪些任务才适合 Agent 自由探索

这并不意味着 Agent 的自主性毫无用处,而是要用对地方。适合它自由探索的任务,基本都落在第七节那两个条件的交集里——答案无法预先结构化,且试错成本可承受。具体来说有几类:

  • 资料归纳与方案对比。 围绕一个相对明确的主题搜集已有资料、对比多种现成方案、梳理成结构化结论。信息空间是已知的,重点在归纳整理,漏掉一点或方向偏了,人一眼就能纠正。
  • 创意与内容生成。 文案、命名、故事、设计发散。产出本就是“多给几个版本供人挑”,错了不伤筋骨,越发散反而越有价值。
  • 探索性研究。 在结果本身就未知的领域里铺开搜索——陌生技术方向的调研、大量线索的初步筛查、多个假设的并行试探。这类工作靠人力做又慢又繁重,人真正的瓶颈是遍历和筛选的速度;Agent 可以在短时间内大范围发散、试错、归纳,把人从繁重的遍历中解放出来,由人来判断哪些线索值得深入。
  • 动态校验与流程试探。 Agent 不断自主生成测试输入去跑通和施压一个流程,根据返回结果再调整下一轮试探。以 RAG 问答系统为例:AI 可持续生成不同角度、不同难度、甚至带陷阱的问题,去检验检索是否命中、回答是否准确、哪里会产生幻觉,并针对暴露的薄弱点追问。这类校验靠人力既单调又难以覆盖全面,而 Agent 能持续、大批量、多维度地把一个流程的边界和缺陷主动探出来。

这类任务的共同点是:人始终是结果的验收者,而不是把决策权让渡给 Agent;Agent 负责发散和试探,人负责收敛和拍板。 反过来,一旦任务要求每个决策都正确、错误会产生实际业务后果、且答案应当被结构化固定下来——那它就该走工作流,而不是寄希望于 Agent 的自由探索。

一句话总结:Agentic 想解决动态需求,但动态需求一旦被真正理解和落地,就变成了可以用程序和工作流解决的静态问题——于是 Agent 要么在不确定中失控,要么在确定后变得多余。企业 Agent 项目的真正主线,因此不是部署一个自主 Agent,而是由具备抽象与快速学习能力的人在实施中持续界定人机边界:哪些抉择必须留给人,哪些实施可以交给 AI,并随认知迭代不断调整。

1. What Agentic promises, and the premise it assumes

The Agentic paradigm promises two things. First, it handles dynamic requirements: it does not depend on pre-written processes and can face situations that were never predefined. Second, it exercises autonomy: within a given scope it judges, decides, calls tools, and completes tasks on its own.

Both promises rest on a premise that is usually overlooked: the designer must know where the range of "dynamic" ends and where the boundary of "autonomy" is drawn. In other words, three questions must be answerable: which situations may the Agent decide by itself? which situations must it stop and hand back to a person? and what is the criterion for deciding "do it myself" versus "hand it over"?

If the boundary is not clear, the Agent faces an open situation it cannot truly understand. The problem at that point is often not "one step more or one step less", but a more direct failure: it keeps returning wrong results and never produces usable output; in severe cases it hallucinates, invents facts and processes, and its output detaches completely from reality. Once it reaches this stage, the team no longer dares to let it act autonomously, nor can frequent human review pull it back on track — because the cost of that review approaches the cost of redoing the work, and the Agent loses its reason for existing.

2. Why this boundary cannot be defined

The real difficulty is this: even the designers themselves cannot say where the boundary of a dynamic requirement lies.

Requirements in an enterprise setting do not exist in complete form when a project starts; they surface gradually during implementation. You think you are solving problem A, and as you work you discover that the real constraint is B, and that B in turn depends on the organizational process C — these only reveal themselves once you actually land the system.

In other words, the boundary is not "designed"; it is brought into being by "implementation". Yet the way Agentic runs requires you to hand the boundary over first, and only then can it run autonomously. That produces a contradiction of ordering:

  • You need to know the boundary before you can let the Agent be autonomous;
  • but you can only know the boundary while the system is running;
  • and while the boundary is unclear, the Agent cannot run autonomously with any reliability.

3. AI itself cannot bridge this gap

If AI could work the boundary out for itself during operation, the contradiction would dissolve. At present it cannot, for two reasons.

1. No sense of proportion: no perception of reality, and no experience of bearing consequences

In enterprise settings a great many judgments are about degree: whether this should be done now, how much is enough, how big the risk is, whether to escalate. Such judgments are hard not because of how much information is available, but because of the "degree".

It should be said that a sense of proportion is not something you automatically possess just because you are "in the real world". Plenty of programmers stand in the middle of the situation every day and still get the degree wrong: they fail to escalate what should be escalated, over-engineer what should be closed out, keep pushing what should be stopped. Perception of reality on its own is clearly not enough. A senior engineer and a novice see the same reality; the difference is that the former has borne the consequences of their own judgments — been right, been wrong, been given feedback — and over time has accumulated a tacit judgment that cannot be written down in full.

AI is missing two layers here. First, it has no channel for perceiving reality: all it ever touches is content that has been transcribed into text, and the customer's tone, the atmosphere on site, the team's real load, the unspoken priorities cannot be transcribed into text completely and in time. Second, and more deeply, it has no experiential loop of "make a judgment — bear the consequences — recalibrate on that basis": it never genuinely suffers from a misjudgment, so it has neither the motivation nor the material from which to build a sense of proportion of its own.

So the question is not "whether enough context is provided"; a sense of proportion cannot be acquired by piling up text at all. Even when a person relays reality to it as a medium, that person must also supply the judgment already calibrated by experience — and a person who can do that is themselves the scarcest role on the team. AI can generate an answer, but it cannot judge on its own whether that answer is appropriate or over the line in a real situation.

2. No real capacity for self-directed learning and evolution

During implementation, people reconstruct their own understanding of the problem in response to feedback: it turns out the requirement was not what I assumed, so next time I will do it differently. This is a correction to the frame of the problem itself. Today's Agents, even equipped with memory and feedback loops, mainly accumulate experience inside an established frame; they struggle to discover on their own that "my understanding of the problem is itself wrong" and to restructure the boundary accordingly. They do not grow new responsibility boundaries of their own during implementation.

"No self-learning ability" here means the absence of the ability to restructure the frame of the problem autonomously — not an inability to adjust from feedback at all. Memory, retrieval augmentation, and fine-tuning can all make it better within a given boundary, but the boundary itself still has to be drawn and corrected by people.

4. People are also learning as they go, so the boundary keeps moving

For people, implementation is a learning process too. People also work it out as they go: what the real pain point of this scenario is; which steps can genuinely be handed to AI and which will certainly go wrong if handed over; how much autonomy the organization can accept.

So the human–machine boundary is not a static line drawn once and for all, but a line that keeps moving during implementation. People are learning and adjusting their expectations, and AI cannot keep up with that movement — it neither perceives that the boundary has shifted, nor realigns itself.

5. The fatal link: once the requirement is clear, the Agent is no longer needed

The predicament above is already difficult enough, but there is a deeper irony that turns the whole problem from "hard to execute" into "self-contradiction at the level of the paradigm".

When designers finally work out the dynamic requirement, draw the human–machine boundary, and land the process, they discover that the requirement is already stable and structured enough to be implemented with ordinary programs and workflows.

A mismatch in timing follows:

  • When the requirement is unclear is exactly when Agent autonomy is most needed to handle the dynamism — but there is no boundary then, so the Agent cannot run autonomously with any reliability;
  • by the time people's implementation and learning have made the requirement clear, the Agent finally has a boundary inside which it can run safely — but by then the work within that boundary is a deterministic process, and hard-coded programs and workflows do it more stably, more cheaply, and more controllably than an Agent.
The boundary paradox of Agentic: an Agent's value lies in handling uncertainty, yet the boundary needed to handle uncertainty can only be handed over once the uncertainty has been removed; and once the uncertainty is removed, the Agent's advantage over a workflow disappears with it.

6. The complete chain of failure

Putting all the stages together, the failure is structural, not a matter of execution falling short:

Agentic needs a clear human–machine boundary in order to be autonomous
        ↓
The boundary cannot be settled at design time; it can only emerge during implementation
        ↓
During implementation the boundary moves as people learn
        ↓
AI has no channel to perceive reality, no consequence-calibrated sense of proportion, and does not restructure the problem frame
        ↓
By the time people and the implementation process finally settle the boundary
        ↓
The requirement is already structured enough → deterministic programs / workflows can deliver it
        ↓
Agentic autonomy no longer has any reason to exist in this scenario
        ↓
The stage that truly needs autonomy (the uncertain one) it cannot handle;
the stage it can safely perform (the certain one) does not need it
        ↓
The project fails, or degenerates into "a workflow wearing an Agent shell"

7. This explains a common phenomenon

Many enterprise projects that call themselves Agentic end up, in practice, as:

  • using a large model for information extraction or classification at a few fixed nodes;
  • wiring those nodes together with a deterministic workflow engine;
  • backing every critical branch with rules and human review;
  • the so-called "autonomous planning" either switched off, or demonstrated only where it does not matter.

This is not a shortfall in the team's ability; it is the inevitable result of the boundary paradox — once a requirement genuinely runs through and lands, its structure stabilizes to the point where autonomy is no longer needed.

Scenarios that can genuinely keep an agentic form must satisfy two conditions at once:
  • The requirement will never be fully structured — there is no fixed correct answer, and no process stable enough to be hard-coded;
  • the margin for error is wide enough — the cost of being wrong is tolerable, and not every decision has to be correct.

Open-ended research, creative generation, and dynamic validation of systems belong to this category. Core enterprise processes are the exact opposite by nature: they pursue being structured, and their margin for error is extremely small. This means that the core businesses an enterprise genuinely cares about are precisely where agentic autonomy fits least of all.

8. The positioning lesson this yields

If the boundary is not designed but emerges during implementation, then the real crux of an enterprise Agent project is not model selection, framework, or model capability, but who keeps defining the human–machine boundary throughout implementation.

This defining work runs through the whole project; it is not a one-off exercise of upfront design or an end-of-project handover. During implementation it must keep answering two kinds of questions:

  • Which steps must have people give feedback and make choices — the handling of degree, the bearing of consequences, the reading of a real situation;
  • which work can be handed to AI to carry out — the parts where the boundary is relatively clear, the cost of a mistake is controllable, and the result can be verified.

And this line moves as people's understanding of the requirement deepens: a step that needs a person today may be handed to AI tomorrow once its pattern has been worked out; a step handed to AI today may be taken back because it runs into a new real-world situation. Defining the boundary is itself the core content of implementation, not a formality completed before implementation begins.

There is a premise here that is often overlooked: this work must be done by someone with the ability to abstract logically and to learn quickly and autonomously during implementation. They must be able to distill stable judgment rules out of scattered trial and feedback, telling which cases are incidental and which will recur; they must be able to locate the "degree", knowing at which step handing anything further over would mean losing control. Without such a role, the boundary either never settles or gets fixed in the wrong place, and the project fails naturally. Adding more engineers or a larger model cannot substitute for it.

So the realistic positioning for enterprise Agents should be:

  • Do not set out to deploy an autonomous Agent to run the business from day one. While the boundary is unsettled, full autonomy is bound to overstep it; a process that can be fully hard-coded is not worth using an Agent for.
  • Make "defining the human–machine boundary during implementation" the main line of the project, led by someone with abstraction and learning ability, with the Agent as their tool for exploring, trialing, and generalizing inside that boundary.
  • Adjust the boundary as understanding iterates: whatever stabilizes is precipitated into a workflow; whatever newly surfaces goes back into human–Agent collaboration. The workflow is not a one-off deliverable produced at the end of the project, but a continuous deposit accumulated while the boundary is being defined.

9. In passing: which tasks are actually suited to free Agent exploration

This does not mean Agent autonomy is useless; it means it has to be used in the right place. Tasks suited to free exploration mostly fall inside the intersection of the two conditions from section 7 — the answer cannot be structured in advance, and the cost of trial and error is tolerable. Specifically, there are several kinds:

  • Material synthesis and option comparison. Gathering existing material around a relatively clear topic, comparing several ready-made options, and organizing them into structured conclusions. The information space is known, and the emphasis is on synthesis; if something is missed or the direction drifts, a person can correct it at a glance.
  • Creative and content generation. Copy, naming, stories, divergent design. The output is inherently "give a few versions for a person to choose from"; being wrong does no real harm, and the more divergent it is, the more valuable it becomes.
  • Exploratory research. Spreading the search across domains where the result itself is unknown — investigating unfamiliar technical directions, triaging large volumes of leads, testing multiple hypotheses in parallel. Done by hand this work is slow and heavy; a person's real bottleneck is the speed of traversal and filtering. An Agent can, in a short time, range widely across a field, run the trials, and consolidate the results, freeing people from the heavy traversal while they judge which leads are worth pursuing.
  • Dynamic validation and process probing. The Agent keeps generating test inputs on its own to run through and stress a process, adjusting the next round of probes according to the returned results. Take a RAG question-answering system as an example: the AI can continuously generate questions from different angles, at different difficulties, even deliberately tricky ones, to check whether retrieval hits, whether answers are accurate, and where hallucination appears, then press further on the weak spots it exposes. Such validation is monotonous and hard to cover comprehensively by hand, whereas an Agent can continuously, at volume, and across many dimensions actively probe out a process's boundary and defects.

What these tasks have in common is: the person is always the acceptor of the result, rather than ceding decision-making power to the Agent; the Agent is responsible for divergence and probing, the person for convergence and the final call. Conversely, once a task requires every decision to be correct, errors carry real business consequences, and the answer should be fixed and structured — then it should run as a workflow, rather than being entrusted to an Agent's free exploration.

In one sentence: Agentic set out to solve dynamic requirements, but once a dynamic requirement is genuinely understood and landed it becomes a static problem that programs and workflows can solve — so the Agent either runs out of control amid uncertainty, or becomes redundant once things are certain. The real main line of an enterprise Agent project is therefore not deploying an autonomous Agent, but having someone with abstraction and rapid learning ability keep defining the human–machine boundary during implementation: which choices must stay with people, which implementation can be handed to AI, and adjusting both as understanding iterates.