// AGENT OPS · MACHINE-WORKER MANAGEMENT · June 20, 2026

Agent Ops Need Change Tickets Before Machine Workers Rewrite Live Workflows

A machine worker should not be able to change the way work runs without leaving a ticket trail the operator can inspect, approve, and roll back.

WhatGoverned edits

Change tickets turn autonomous workflow changes into reviewable units instead of invisible side effects of agent execution.

WhyGood fixes travel

Machine workers can solve a local blocker by changing a shared rule that other teams, customers, and agents depend on.

ConsequenceSafer speed

Operators get faster process improvement without letting agents rewrite production operations from inside the task queue.

Autonomous workers will eventually try to improve the machine.

The first phase of agent ops is execution: read the task, use the tools, finish the work. The second phase is modification. Agents notice friction. They see that a sales sequence creates too many exceptions. They learn that a support macro misses a field. They discover that a routing rule sends the wrong accounts to the wrong owner.

That instinct is useful. It is also where autonomy gets expensive. A human operator can usually tell the difference between fixing one job and changing the operating system. A machine worker may treat both as ordinary optimization.

The control plane has to make this distinction explicit: agents can recommend process changes freely, but live workflow changes require a ticket.

Five fields every agent change ticket needs.

01Change intent

State what the agent wants to alter and which friction, failure, or opportunity the change is supposed to address.

02Scope boundary

Name the systems, teams, customers, channels, segments, and downstream agents touched by the workflow rewrite.

03Blast radius

Describe what can go wrong if the new rule misfires: duplicate outreach, stale routing, lost approvals, broken SLAs, or revenue-data damage.

04Rollback path

Define exactly how to revert the prompt, policy, automation, or config and where the previous version is stored.

05Evidence gate

Require before-and-after proof: test case, sample account, dry run, reviewer note, metric delta, and expiry for the experiment.

The dangerous change is the one that looks operationally obvious.

Picture a RevOps agent that keeps finding duplicate leads. It changes the merge rule so duplicates collapse faster. The local result is cleaner. Two weeks later enterprise accounts lose buying-committee detail because different people at the same company were compressed into one record.

Or take a customer-success worker that notices escalations are noisy. It raises the threshold for urgency. The queue gets quieter, but small signs of churn now arrive late. Nobody approved a churn-risk policy change. The agent simply optimized the work it could see.

This is why “the agent was trying to help” is not a control. Helpful changes still need ownership.

The workflow rewrite map

Live rule

Identify the exact prompt, automation, routing rule, playbook step, permission, or sequence logic the agent wants to change.

Dependency chain

List the jobs, queues, agents, dashboards, reports, and human owners that depend on that rule staying stable.

Review class

Separate low-risk drafts, reversible experiments, customer-facing changes, revenue-system writes, and authority changes.

Release mode

Choose draft-only, sandbox test, limited segment, time-boxed trial, human-approved release, or blocked until owner review.

Audit receipt

Log who approved the change, what evidence passed, what version shipped, and what signal will trigger rollback.

Change tickets do not slow agents down. They stop agents from becoming shadow admins.

Teams often fear governance because they picture a committee blocking every improvement. That is the wrong model. A good change-ticket system lets agents file proposed fixes quickly, attach evidence, and route the request to the right owner without turning the live system into an editable scratchpad.

The useful speed is in diagnosis, drafting, and testing. The dangerous speed is in unowned production mutation. Machine workers should be aggressive at finding better ways to operate and conservative at changing the shared rules other workers rely on.

If a change cannot survive a short ticket, it probably should not touch production.

Autonomous improvement is only leverage when every workflow rewrite has an owner, a receipt, and a way back.
Operator checks

Three signs your agents need change tickets now

01Rules change in task logs

Prompts, automations, or routing policies get edited as part of doing work, not as a separate reviewed change.

02No version owner

Teams cannot say who approved the current workflow behavior or why the last rule changed.

03Rollback is folklore

Reverting a bad agent-driven process change depends on memory, chat history, or finding an old file by hand.

Install one change-ticket gate this week.

PickA live workflow

Start with CRM routing, outbound sequencing, support escalation, approval thresholds, or agent prompt changes.

DefineThe ticket fields

Require intent, scope, blast radius, reviewer, test evidence, rollback path, and expiry before release.

ClassifyChange risk

Let agents draft low-risk changes automatically, but require review for customer-facing, revenue, permission, or policy edits.

MeasureThe receipt

Track approved changes, rejected changes, rollbacks, incidents avoided, and stale experiments removed.

Concrete takeaway for this week

Add a change-ticket requirement to one place where agents can modify how future work runs.

The blunt rule: machine workers can find better processes, but they do not get to quietly become the process owner.