End-to-end agentic workflow implementation

Taking one whole business process agentic, rather than assisting the humans doing it.

End-to-end agentic workflow implementation means taking a complete business process, intake through decision through action through record, and rebuilding it so agents perform the work and humans govern it, rather than adding assistance to each step. It is where the compounding returns are, and it is materially harder than assisted workflows because it requires the operating model, the governance and the engineering to change together. Tenhaw is partway through doing this to its own operations, which is where much of this pattern comes from and why we can be specific about what breaks.

Theme
Whole programmes
Read time
22 minutes
Questions answered
21 in full
Updated
Evidence basisDelivered, with the limit stated
Usually engaged as
Agentic Build Team. 6–12 months, £70k–£85k / month.
see the engagement →
Evidence basis

We have done this, and here is exactly how far that goes.

We are running this pattern on our own operations right now, and it is not finished. Today our development pipeline is AI-engineering-first, our social content pipeline is semi-automated, and we run research agents doing competitor monitoring and opportunity-gap analysis. Our go-to-market process is being built the same way. The stated goal is that humans are in the loop only where they add value an AI could not, we are not there yet. On client work we have delivered components of this pattern, including confidence-scored validation of entity-resolution output with human routing. We have not taken a complete enterprise process fully agentic end to end for a client, and that is exactly what our build teams are scoped for.

On this page

What enterprise AI means, and why the enterprise half is the hard one

Enterprise AI is artificial intelligence doing a real share of an organisation's work, inside its systems, its permissions and its audit trail, rather than a licence per employee sitting beside a process that has not changed. The capability question is largely settled: a competent team can show a model doing the difficult part of a process in a fortnight, and most enterprises have now seen that demonstration. What the phrase is actually pointing at is everything around the fortnight. Who the agent is when it acts, what it is allowed to reach, what evidence it leaves behind, who answers for the decision it took, and whether the next agent inherits any of that or starts from nothing. Those are the parts that decide whether an organisation ends up with one impressive workflow or a different way of working.

  • The unit is a process, not a tool rollout

    Enterprise AI bought by the seat gets measured by the seat, which is how a programme reports strong adoption and unchanged cycle times in the same pack. Assistance makes each step faster, and in most consequential processes the steps were never the majority of the elapsed time: the handoffs, the approvals and the queues were. The version that moves a number leadership already watches is scoped as a complete process, intake through decision through action through record, with one accountable owner and an elapsed-time baseline taken before anything is built. That is a different conversation from a tooling one, and usually a different sponsor.

  • The enterprise constraints are the design, not the paperwork

    What makes an AI system enterprise-grade shows up as engineering rather than as policy. The agent needs an identity of its own rather than a developer's credentials, so what it did can be reconstructed months later. Retrieval has to answer from what the person asking is permitted to see, which is a property of the index rather than a filter bolted on at the end. The evidence a governance function will ask for has to fall out of the run rather than be assembled from logs a quarter afterwards. Left until after the pilot, most of those are not hardening: they are a rebuild of the thing you just proved.

  • The economics live in the exception path and the run cost

    The happy path is typically 70% of volume and 20% of effort, so an enterprise AI case built on it is a case built on the cheap fifth of the work. Route by confidence and consequence, staff the human path deliberately rather than as overflow, and price what the system costs to run as well as to build: inference and retrieval per run, the review the routing actually implies, monitoring, and a re-evaluation every time a model version changes underneath you. A case with a build cost and no run cost has measured its payback against half the bill.

  • Enterprise scale is a property of the second agent, not the first

    The question the phrase is usually carrying is how this gets from one workflow to twenty, and the answer is not a larger programme. It is that the parts every agent needs, identity and scoped permissions, permission-aware retrieval, an evaluation harness, observability, a deployment path and an agreed boundary with your second line, are pulled out of the first two processes and inherited by everything after them. Built up front, that is a platform programme with nothing a board can see. Rebuilt per agent, every security approval is paid for again and the portfolio stalls at the point where nobody can justify the next business case.

  • What it looks like in a firm running it on itself

    Our own development pipeline is AI-engineering-first, our social content pipeline is semi-automated, and research agents run competitor monitoring and opportunity-gap analysis while the go-to-market process is rebuilt the same way. The shared layer underneath that is an open-source engineering handbook of 72 rules with stable identifiers and RFC 2119 severities, enforced by an agent rather than remembered by a person, which is what makes the next build cheaper than the last one. The design principle is the one we would hold a client to: humans in the loop where they add value an AI could not. How far that has actually got, and which parts of it have run on a client estate, is stated in full above and in the questions at the foot of this page.

The demand signal

The gap that matters is not between organisations using AI and organisations not using it. It is between assisting the steps of a process and changing the process, and the evidence that the first does not become the second on its own is now reasonably direct. The DORA programme's 2025 research on AI-assisted software development found that AI amplifies an organisation's existing strengths and weaknesses rather than delivering a uniform uplift, which is the same finding in a different domain: the tooling does not change the process, and the process is what elapsed time is made of.

Why it stalls

5 failure modes we keep meeting

Every step has an assistant and the process is exactly as slow as it was

Every step gets faster and the end-to-end cycle time barely moves, because the waits between steps (handoffs, approvals, queues) were always the majority of elapsed time. This is the most common disappointment in enterprise AI, and it is a process design problem rather than a model one. It is also uncomfortable to report upwards, because the tooling did what it promised and the number the board was given has not moved.

Every agent is a one-off, so the tenth costs what the first did

Organisations that set out to scale AI agents across the enterprise usually find there is no substrate underneath: no shared identity model, no evaluation harness, no permission-aware retrieval, no common observability or deployment path. Each new agent therefore repeats the entire cost of the first, including every security and risk approval, and the programme stalls not because any single agent failed but because nobody can justify the twentieth business case. That substrate is not a platform project to be completed first, which is its own way of never shipping. It is the small set of things you deliberately generalise out of the first two processes, on the way through.

The process nobody owns end to end

Most consequential business processes cross three or four functions, each owning a segment. Taking the process agentic requires someone with authority over the whole, and if that person does not exist the programme optimises segments and stops.

Exceptions were never designed

The happy path is 70% of volume and 20% of effort. Agentic implementations that do not design the exception path early hit a wall where the automated portion is done and the remaining work is harder than before, because the easy cases that used to give staff context have gone.

Governance was designed for human decisions

Existing approval thresholds, four-eyes checks and audit expectations assume a human at each point. Running agents through them either creates a bottleneck that removes the benefit, or gets bypassed, which is worse. The controls need redesigning for the new decision profile rather than inheriting.

How we approach it

6 moves, in order

  1. 01

    Pick a process, not a use case

    We scope by complete process with a measurable business outcome and an accountable owner, rather than by task. If no single person has authority over the whole process, establishing that is the first piece of work and we will say so before contracting.

  2. 02

    Map the waits, not just the work

    The elapsed-time analysis usually shows the handoffs and approvals dominate. That determines where agents actually create value, and it frequently redirects the programme away from the step everyone assumed was the bottleneck.

  3. 03

    Design the exception path in the first fortnight

    Routing by confidence and consequence, with the human path specified and resourced from the start. The exception path is the part that decides whether the economics work, and designing it late is the most expensive sequencing error in this pattern.

  4. 04

    Rebuild the controls for the new decision profile

    Approval thresholds, four-eyes requirements and audit evidence are redesigned with your second line as co-authors, based on which decisions are consequential and which are cheaply reversible, not inherited from a process that assumed a human at every point.

  5. 05

    Ship a slice end to end before widening

    One complete path through the process, in production, month by month, rather than every step automated to 80% and nothing finished. A narrow slice that runs end to end teaches you more than broad partial coverage, and it is something the board can see.

  6. 06

    Generalise on the second process, not the first

    The pieces every agent will need (identity and scoped permissions, permission-aware retrieval, an evaluation harness, observability, a deployment path, an agreed human-approval boundary) are pulled out into shared components while doing the second process, once you have two real examples to generalise from. Building that platform before the first process is how organisations spend a year shipping nothing, and rebuilding it per agent is how they stall at three. This is the step that decides whether the programme can scale beyond the processes you personally sponsor.

The elapsed-time analysis usually shows the handoffs and approvals dominate.

The platform we build on, and where we hold a view rather than a delivery

3 delivered, 5 our approach

Named, because a supplier who will not name the stack is asking you to take the architecture on trust. Each entry carries the same two labels as the guide itself. Delivered means we have shipped on it and you can ask us what broke. Our approach means we hold a position with no delivery behind it.

  • Microsoft Azure and Azure OpenAI

    Delivered

    Microsoft's cloud, and its hosted access to frontier models inside a tenancy you control.

    Every agentic system we have delivered runs here. The two-week document pipeline on a live insurance engagement was built from a blank repository on Azure, and a separate proof of concept on Azure OpenAI validated and scored entity-resolution output so human review could be routed rather than queued. If your estate is Azure we are repeating a delivery; anywhere else we are applying a method. What we have delivered here is proofs of concept, not a production system.

  • Amazon Bedrock and Amazon SageMaker

    Our approach

    AWS's managed access to foundation models, and its platform for training and serving models.

    We have delivered nothing on either. The shape of every pattern in this guide holds across clouds: what genuinely changes is the document-understanding service, how identity federates from your source systems, and where the index and the embeddings physically sit. On an AWS estate we would expect to work alongside your own platform engineers rather than lead the platform work, and we would price and scope it that way rather than learn it on your budget.

  • Google Vertex AI

    Our approach

    Google Cloud's managed platform for foundation models and machine learning.

    Same position as AWS: no delivery. The method transfers, the service choices do not, and anyone telling you a cloud migration is incidental to an agentic programme has not done one.

  • Kubernetes

    Our approach

    The container orchestration platform most large estates already run something on.

    Kubernetes work here runs with your own platform engineers. The position is a sequencing one: do not make your first agentic workflow depend on standing one up. Where you already run a cluster, an agent is another workload on it and that is the cheap answer. Where you do not, a managed runtime gets the first workflow to production sooner, and the platform decision is better taken once you have two real workloads to generalise from rather than nought.

  • Terraform

    Our approach

    Infrastructure defined as code and applied from version control.

    No delivered Terraform estate, and the position is narrower than the tool. An agent's identity, its scoped permissions and its tool list belong in version control beside the rest of the infrastructure definition and reviewed the same way, because a permission granted through a console at four on a Friday is the one nobody can account for at the audit. Whether that is Terraform, Bicep or something else is your platform team's call and not ours.

  • Apache Airflow

    Our approach

    Scheduled orchestration of data pipelines as directed graphs.

    No delivered Airflow estate. Worth naming because of the distinction it forces. A scheduled graph is the right tool for the deterministic parts of a workflow, ingest, extraction, enrichment, load, and an agent trajectory is the part where the next step is chosen at run time. Most end-to-end agentic workflows are mostly the first thing with the second thing inside them, and programmes that model everything as an agent trajectory pay for non-determinism they never needed, in evaluation cost and in explaining themselves afterwards.

  • Git, markdown and a model at maximum reasoning

    Delivered

    The build method itself, published in full including the parts that go wrong.

    Every requirement becomes structured markdown held in Git, a model builds a knowledge map across the whole corpus, and a gap-and-contradiction pass runs before a line of code exists. Only then does the build start, from a blank repository, prompted against the full requirement set with a security review roughly every fifth prompt and pair-programmed throughout. Development starts by pasting an outcome-shaped epic into Claude or Codex in the editor. That is delivered: it produced the two-week proof of concept, and the client engineer who paired on the whole fortnight finished it 70% confident they could run the process without us.

  • GitHub and Azure DevOps

    Delivered

    Where the work is tracked and where the code lives.

    On the live insurance engagement we led the migration from Azure DevOps boards to a GitHub-based delivery model with agent-assisted workflows. Named because the delivery substrate decides how much of the agent-assisted workflow is available to you at all, and because it is the least glamorous dependency in an agentic programme and one of the more common blockers.

Ask a technical questionanswers from all 13 guides
Ask anything technical about end-to-end agentic workflow implementation and I will answer from this guide, and tell you first whether this is work we have delivered or an approach we would be taking.

Prefer to talk it through? Ask us on a discovery call →

engage via

Talk to us about end-to-end agentic workflow implementation.

A 30-minute call with James Rooney. We'll tell you honestly which parts of this we have done before and which we would be doing for the first time, and you'll leave with a rough scope either way.

most start with a fixed-price AI Readiness Audit · £44,000 · 4 weeks · working prototypes

// pick a slot · cal.com/tenhaw/professional-servicesLIVE CALENDAR

Calendar not loading? Open it on cal.com or email hello@tenhaw.com.

Questions this guide answers

What technology stack does Tenhaw build agentic systems on?

Microsoft Azure, including Azure OpenAI. On a live insurance engagement the document pipeline was built from a blank repository on Azure in two weeks as a working proof of concept, now being productionised against the client's security standards, and a separate proof of concept on Azure OpenAI scored and validated entity-resolution output. The build method is Git and markdown rather than a framework. Every requirement becomes structured markdown, a model interrogates the corpus for gaps and contradictions before any code exists, then the build runs against the full requirement set at maximum reasoning, pair-programmed with your engineers. Delivery runs through GitHub, and we led that engagement's migration from Azure DevOps boards. Kubernetes, Terraform and Airflow we take with your platform engineers and price into scope.

Do we need Kubernetes, Terraform or Airflow to run agents?

Not for the first workflow, and the right ordering saves a quarter. If you already run a Kubernetes cluster, an agent is another workload on it. If you do not, standing one up puts a platform programme in front of what you were trying to prove, and a managed runtime reaches production sooner. Terraform, or whatever your platform team already uses, matters for a narrower reason than hosting. An agent's identity, its scoped permissions and its tool list belong in version control, reviewed as code, because a permission granted through a console is the one nobody can account for later. Airflow, or any scheduler, keeps the deterministic majority of a workflow deterministic. All three we take alongside your platform engineers and price into scope.

What is an end-to-end agentic workflow?

A complete business process (intake, decision, action and record) where agents perform the work and humans govern it, rather than each step being assisted while the overall shape stays the same. The distinction matters because assisting individual steps typically leaves end-to-end cycle time almost unchanged, since the waits between steps were always the majority of elapsed time.

What is enterprise AI?

Enterprise AI is artificial intelligence doing a real share of an organisation's work, inside its systems, its permissions and its audit trail, rather than a licence per employee alongside a process that has not changed. In practice the phrase describes four commitments rather than a technology: the agent acts under an identity of its own, so what it did can be reconstructed later; retrieval answers only from what the person asking is permitted to see; the evidence a governance function will want falls out of the run rather than being assembled afterwards; and the decisions agents may take are bounded by consequence and reversibility, agreed with your second line. Enterprise AI that scales adds a fifth: the identity model, the retrieval, the evaluation harness, the observability and the deployment path are shared between agents rather than rebuilt for each one.

How is enterprise AI different from the AI tools our staff already use?

Assistants change how a step is done, and enterprise AI changes what the process is. That difference shows up in the number the board is watching. Making every step faster compresses the minority of a cycle time that was ever work, because the majority of elapsed time in most consequential processes is waiting: for a handoff, an approval, a queue, someone's availability. It also shows up in what has to exist around the system. A tool used by a person inherits that person's access, judgement and accountability, and an agent doing the work inherits none of them, so identity, permission-aware retrieval, audit evidence and an agreed human-approval boundary stop being good practice and become the design. Licences are a procurement decision. Enterprise AI is an operating-model one.

Has Tenhaw taken an enterprise process fully agentic?

Not for a client, and we would rather say so here than have you find it in month two. We are partway through doing it to our own operations: the development pipeline is AI-engineering-first, the social content pipeline is semi-automated, research agents run competitor monitoring and opportunity-gap analysis, and the go-to-market process is being rebuilt the same way. On client work we have delivered components of the pattern rather than the whole of it, including a two-week proof of concept taking PDFs through to business intelligence on Azure for a London specialty insurance business, now being productionised against their security standards, and confidence-scored validation of entity-resolution output with human routing. Everything we have built agentically runs on Microsoft Azure, including Azure OpenAI, and nothing has shipped on Amazon Bedrock, Amazon SageMaker or Google Vertex AI. Taking a complete enterprise process end to end is exactly what our build teams are scoped for, and on the call we will tell you which parts of yours we would be doing for the first time.

How do you scale AI agents across an enterprise?

Deep before broad, generalising on the way through. Take one complete process, with an accountable owner and a measurable outcome, right through to production. A narrow slice that runs end to end teaches more than twenty steps at 80%. Then make the parts every agent needs shared, not rebuilt: identity and scoped permissions, permission-aware retrieval, an evaluation harness, observability, a deployment path, and an agreed boundary with your second line on which decisions need a human. Tenhaw's shared layer is an open-source engineering handbook of 72 rules with stable identifiers and RFC 2119 severities, enforced by an agent rather than remembered by a human. That substrate is why the fifth agent costs less than the first, and its absence is why portfolios stall at three.

Why doesn't AI assistance reduce our cycle times?

Because the work was rarely the bottleneck. In most consequential processes the majority of elapsed time is waiting, for a handoff, an approval, a queue, someone's availability. Making each step faster compresses the minority of the timeline. Reducing cycle time requires removing the waits, which is process and operating-model change rather than tooling.

Where do end-to-end agentic implementations usually fail?

Five places. Nobody owns the process end to end, so it optimises by segment and stalls at the functional boundary. The exception path was not designed, so the automated portion finishes and the residue is harder than the original job. Governance designed for human decisions either bottlenecks the agents or gets bypassed. Programmes go broad rather than deep, automating every step to 80% and finishing nothing. And nothing is generalised between agents, so every one costs what the first one did and the programme stalls at the point where the next business case cannot be justified.

How do you decide which decisions agents can take?

By consequence and reversibility rather than by complexity. Agents take decisions that are high-volume, observable and cheaply reversible; humans retain decisions that are consequential, contested or hard to undo. That boundary is written down per decision class, the escalation path across it is designed, and your second-line risk function co-authors it rather than reviewing it afterwards.

How do you handle exceptions in an agentic workflow?

Design the exception path in the first fortnight, because it decides whether the economics work. The happy path is typically 70% of volume and only 20% of effort, so an implementation that only handles the easy cases hits a wall once the automated portion is done and the remaining work is harder than before, because the routine cases that used to give staff context have gone. Route by confidence and consequence, specify the human path from the start, and resource it properly rather than treating it as overflow. Designing it late is the most expensive sequencing error in this kind of work.

Do our existing approval processes work for AI agents?

Usually not as they stand, because they assume a human at every decision point. Run agents through approval thresholds and four-eyes checks designed for people and one of two things happens. Either the controls become a bottleneck that removes the benefit of automating, or they get quietly bypassed, which is worse. The fix is to redesign the controls for the new decision profile, with your second-line risk function as co-authors rather than after-the-fact reviewers, based on which decisions are consequential and which are cheaply reversible, instead of inheriting a control set built for a process that no longer exists.

Should we build an AI platform before deploying our first agents?

No, and building it first is its own way of never shipping. A platform stood up before any real process runs on it can absorb a year of engineering with nothing a board can see, and its requirements are guesses until real agents exist. Tenhaw's two-week proof of concept for a London specialty insurance business took PDFs through to business intelligence with no platform built first. The opposite failure is as common. With nothing shared between agents, the tenth costs what the first did, every security approval is repeated, and nobody can justify the twentieth business case. So ship the first process end to end, then pull the shared pieces out while delivering the second, once there are two real examples to generalise from.

Which process should we take agentic first?

Pick a complete process rather than a use case, one with a measurable business outcome, an accountable owner, and enough size that improving it moves a number leadership already watches. Map the elapsed time before committing. In most consequential processes the majority of that time is handoffs, approvals and queues rather than the steps themselves, and the analysis regularly redirects a programme away from the step everyone assumed was the bottleneck. Choose from that picture rather than from a use-case list, and one you can take all the way through intake, decision, action and record rather than four steps out of six. Tenhaw's Globelynx engagement cut lead time by 60% inside six months, the kind of number a first process should move.

Nobody owns our process end to end. Can we still start?

Yes, but establishing that ownership is the first piece of work, and Tenhaw says so before contracting rather than halfway through a build. Most consequential processes cross three or four functions, each owning a segment, so taking one agentic needs somebody with authority over the whole. Without that the programme optimises segments, stalls at the first functional boundary, and leaves faster steps inside an unchanged cycle time. Sometimes the answer is a sponsor with real decision rights across those functions, sometimes it is genuine operating model work. Tenhaw's founder co-designed one of those at HSBC Global Payment Solutions, covering 500 teams and a $450M portfolio, piloted rather than rolled out. Either way it is cheaper to settle at the start than once agents are live.

What happens to the team that runs the process today?

Their work changes shape rather than disappearing. In an agentic process people govern the work rather than perform it, taking the cases that need judgement, owning the controls the agents run inside, and deciding what happens when something falls outside them. On a London specialty insurance proof of concept Tenhaw paired throughout with one of the client's engineers, who finished 70% confident they could run the process unaided. Plan for a harder job than the old one, because the routine cases that used to build context and judgement are the ones agents take first. So staff the exception path deliberately rather than as overflow, and keep the people who work exceptions today inside the design, since they know which edge cases genuinely occur.

We are on AWS, not Azure. Can you still deliver this?

Yes, with one honest change in who leads the platform work. Everything Tenhaw has delivered agentically runs on Microsoft Azure, including Azure OpenAI, and nothing has shipped on Amazon Bedrock, Amazon SageMaker or Google Vertex AI. The shape of the pattern holds across clouds. What genuinely changes is the document-understanding service, how identity federates from your source systems, and where the index and the embeddings physically sit. On an AWS estate Tenhaw would work alongside your own platform engineers instead of leading the platform work, bringing a method it publishes in full and free for anyone to adopt rather than a cloud it is learning on your budget.

Should the whole workflow be an agent, or only part of it?

Only part, in most cases. Most end-to-end agentic workflows are mostly a deterministic pipeline (ingest, extraction, enrichment, load) with an agent trajectory inside it, and the agent belongs where the next step is genuinely chosen at run time rather than known in advance. Modelling the deterministic parts as agent decisions buys non-determinism you never needed, and you pay for it twice, once in evaluation because every trajectory has to be tested, and again when somebody asks why a particular case went the way it did. A scheduled graph is dull, cheap to explain and easy to audit. Keep the judgement in the agent and leave the plumbing to the pipeline.

How do we prove the cycle time actually came down?

Baseline the elapsed time before anything is built, end to end rather than step by step, using the map that shows where the handoffs, approvals and queues sit. The map is the measurement instrument as well as the design input, because once you know how long a case waited at each boundary before, you can show what the rebuilt process does to the same boundaries rather than argue about how much faster individual steps feel. Then report against it every month. Tenhaw holds itself to that on its own engagements, where a month that delivers no measurable value is reported as a failed month rather than smoothed into the next one.

Do we need a fresh risk sign-off for every agent we deploy?

Only for what is genuinely new about it, provided the parts every agent needs are shared rather than rebuilt. Agent identity and scoped permissions, permission-aware retrieval, an evaluation harness, observability and the deployment path are properties of the platform, approved once and then inherited, and they are best pulled out of your first two processes rather than built up front. Hold a standing agreement with your second line about which classes of decision need a human, so that boundary is not renegotiated each time either. What is left to assess for any new agent is the decisions it takes, the data it touches and the tools it can call.

Do you run agentic workflows inside your own business?

Yes, and it is where much of this method was proved. Tenhaw's own development pipeline is AI-engineering-first, its social content pipeline is semi-automated, research agents run competitor monitoring and opportunity-gap analysis, and its go-to-market process is being rebuilt the same way. Running the pattern on itself is why Tenhaw can be specific about what breaks rather than about what demonstrates well. The same components are delivered on client work, including confidence-scored validation of entity-resolution output with human routing on a live insurance engagement, and Velocity84, Tenhaw's build lab, has produced more than twenty agentic products across voice, video, document reading, mobile and go-to-market. The design principle throughout is humans in the loop where they add value an AI could not.