From a document to a reviewed business record
A useful document workflow makes it easier for someone to approve the right record. It preserves missing information, shows where each proposed value came from and stops a draft becoming an operational commitment too early.
What to take away
- Preserve missing and ambiguous fields instead of manufacturing a complete record.
- Attach approval to the exact draft version and permitted action.
- Test duplicate handling, denied access and uncertain write outcomes.
Purpose and scope
That is a more concrete buying brief than “automate our documents”. You can take one representative request, decide what the resulting record should contain and test the exception path alongside the straightforward case. The worked example below shows how to do that before selecting a model or integration.
Everything in this example is synthetic: the request, person, site and proposed record. It is a design exercise, not a customer story or an observed DataXLR8 result. The worksheet is our editorial recommendation for a bounded trial.
Start with the source exactly as received
Imagine an example maintenance desk receives this message:
| Field | Proposed draft value | Evidence and next check |
|---|---|---|
| Site | BR-17, unverified | Explicit in message; match against authorised site register |
| Access contact | Jordan Example, unmatched | Explicit name; do not infer an email or phone |
| Requested date | Unresolved | Preserve “next Thursday”; obtain date context and confirm meaning |
| Preferred time | After 2 pm | Preserve as a preference; timezone unresolved |
| Work description | Missing | Ask what maintenance is required |
| Appointment | Not confirmed | The request does not establish availability or acceptance |
| Workflow status | Needs clarification | Do not release an incomplete draft for booking |
Please arrange maintenance for site BR-17 next Thursday. The access contact is Jordan Example. Our preferred time is after 2 pm.
The message contains useful information, but leaves out the request date, timezone, contact channel and required work. A demonstration that fills every field could conceal those omissions. A reviewable draft should make them easy to see.
Keep the original wording beside the extracted fields. This lets the reviewer distinguish what the sender said from what another system subsequently verified. If an authorised register confirms BR-17, record that register lookup as a separate source rather than making it appear in the original message.
Resolve uncertainty before asking for approval
“Next Thursday” needs context and can still need clarification after the sending date is known. Do not silently use the date the automation happens to run. A delayed message or retried job could otherwise change its interpretation.
The reviewer should ask for the missing work description and confirm the intended date and timezone. The workflow should preserve that clarification as evidence for the revised draft. A preferred time remains a preference until an authorised scheduling step confirms it.
Anthropic's evaluation guidance recommends tasks grounded in realistic usage with verifiable outcomes. In this example, a good outcome is a record whose fields are supported and whose unresolved state is visible. Formatting a plausible booking is insufficient.
Make the approval attach to a particular version
A reviewer needs to see the source, proposed fields, outstanding exceptions and the precise action they are approving. An “approve” button should not authorise unspecified future changes.
For this example, define the allowed action as creating one maintenance-request record from the reviewed version. Keep appointment confirmation outside that authority unless it is explicitly part of the agreed process. If someone edits the draft after review, return the changed version for approval before it can be written.
Diagram description: Extraction produces a draft with evidence. Missing or invalid values go through clarification. A person reviews a specific version, then system checks enforce permission and duplicate protection before a write. Failed checks leave a visible recovery state. Success displays the saved record and its audit reference.
This separation matters because the model's proposed action and the system's permission to perform it are different controls. OWASP recommends restricting functionality and permissions, requiring approval for high-impact actions and enforcing authorisation outside the model.
- Extract
Keep source wording beside proposed fields.
- Clarify
Resolve missing and ambiguous values before approval.
- Review
Approve or reject the exact draft version and proposed action.
- Enforce
Check permission, version and duplicate protection before writing.
- Confirm
Show the saved record or a visible recovery state.
Use an exception worksheet before accepting the build
Give the implementer expected outcomes before the demonstration. Ask for observed results from the actual trial configuration, including failures. The table below contains proposed expectations; no system is claimed to have passed them.
| Test case | Required outcome | Evidence to retain |
|---|---|---|
| Message lacks work details | Draft remains incomplete | Missing-field state and clarification request |
| Relative date has no reliable context | Calendar date remains unresolved | Original wording and recorded question |
| Site ID has a similar-looking alternative | No silent substitution | Exact-match result or exception |
| User lacks access to that site | No site details disclosed or record written | Denial event without restricted content |
| Same submission arrives twice | No unintended duplicate record | Submission identity and recorded handling |
| Reviewer changes a field | Changed version requires approval | Version history and final approved values |
| Integration times out after submission | Reconcile whether a record exists before retrying | Request reference and recovery decision |
| Approval is missing, expired or rejected | Write is blocked | Inspectable authorisation result |
For each case, add a responsible reviewer, observed result, correction required and retest date. Set acceptance thresholds for the actual workload and consequences of error. The National AI Centre recommends documented acceptance criteria, relevant testing, supplier evidence and accountable deployment authorisation; it does not make this example a certification.
Include the review work in the business case
Measure the entire path to an accepted record. Record extraction time, human review, clarification, correction and failed attempts. Compare that with the existing process on comparable work. Counting only the model's response time would omit much of the job illustrated here.
A useful accounting view is total operating cost during the trial divided by accepted records during the same period. Include usage fees, infrastructure, review and support where they apply, and avoid double-counting bundled charges. If no records are accepted, report the total cost and failures; the ratio is undefined. This is a proposed measurement method, not a price estimate or a claim of savings.
Also decide who can access source documents, drafts and review logs, and how each is retained or removed. OAIC's AI guidance covers personal information in inputs and outputs; the appropriate handling decision depends on the organisation and use. Do not assume that removing a document from one folder removes every retained copy.
Bring one representative document, a blank target record and the exception worksheet to a scoping conversation. If ordinary form validation and a fixed workflow solve the job, that is a useful result. For wider authority boundaries, read Before an AI workflow acts, decide how it can fail. To define the first useful release, see Start with a decision or discuss the workflow with DataXLR8.
Before you proceed
- Preserve the original source and field references.
- Leave unsupported values blank or explicitly unresolved.
- Verify site access and exact identifiers.
- Clarify relative dates, timezone and work scope.
- Show the reviewer the precise action and draft version.
- Block writes without current authorisation.
- Test retries and reconcile uncertain integration outcomes.
- Measure clarification, review, correction and failed work.
Sources and further reading
Official sources support the requirements described here. Our suggested workflows and illustrative examples are practical guidance, not an assurance of compliance or a claim about client results.
- Writing effective tools for agentsAnthropic
Opened and checked 2 October 2026. Source scope and limitations are recorded in the editorial source inventory.
- LLM06:2025 Excessive AgencyOWASP
Opened and checked 2 October 2026. Source scope and limitations are recorded in the editorial source inventory.
- Guidance for AI Adoption: implementation guidanceNational AI Centre
Opened and checked 2 October 2026. Source scope and limitations are recorded in the editorial source inventory.
- Guidance on privacy and the use of commercially available AI productsOAIC
Opened and checked 2 October 2026. Source scope and limitations are recorded in the editorial source inventory.