title: What to Delegate to an AI Ops Agent First (and What to Keep)
date: 2026-09-14
slug: 2026-09-14-what-to-delegate-to-an-ai-ops-agent-first
summary: A delegation ladder for SMB owners: start read-only, graduate to bounded writes, keep money and public sends gated. A 30-day rollout built on blast radius.
tags: delegation, smb, adoption, autonomy-design

# What to Delegate to an AI Ops Agent First (and What to Keep)

The most common question we get from small business owners is not "does this work?" It's "where do I start?" The wrong answer is a job title: "have it do marketing" or "make it my assistant." Job titles bundle together tasks with wildly different risk profiles. The right answer is a ladder, and the rungs are sorted by one thing: blast radius.

Ask two questions about any task before delegating it:

1. **If the agent does it wrong, can you undo it?**
2. **If the agent does it wrong, who sees it before you do?**

Tasks where the answers are "yes, trivially" and "nobody" go first. Tasks where the answers are "no" and "your customers" go last, or never.

## Rung 1: Read-only work (week 1)

Start where the agent cannot break anything because it cannot write anything.

- **Inbox triage.** Classify incoming email as urgent, routine, or noise. It flags; you act. You'll learn its judgment fast, and a misclassification costs you seconds.
- **Monitoring and daily checks.** Uptime, failed payments, error rates, low inventory. The value is consistency: the check runs every day, identically, with a record.
- **Summaries and reports.** A morning brief, a weekly rollup, competitor or industry watch. If a summary is wrong, you read a bad paragraph. That's the whole downside.

You are not saving much time yet. That's fine. Week 1 is about calibration: you're learning where the agent is sharp and where it's confidently wrong, at zero cost.

## Rung 2: Drafts (weeks 2-3)

The agent now produces work product, but nothing leaves the building without your click.

- **Drafted replies** to routine email, queued for your review.
- **Drafted invoices** assembled from the work log, with line items and reasoning attached.
- **Drafted documents:** meeting agendas, SOPs, follow-up notes.

The pattern is the same everywhere: the agent does the 90% that is assembly and recall, you do the 10% that is judgment and accountability. Track your edit rate. When you go a week approving a category of drafts without touching them, that category is a promotion candidate.

## Rung 3: Bounded writes (week 4 and onward)

Now the agent acts alone, but only where actions are reversible and logged.

- Updating internal trackers and spreadsheets.
- Scheduling and rescheduling internal reminders.
- Archiving (never deleting) processed email.
- Re-running a failed job once, with a retry budget.
- Publishing to channels you designate as agent-owned, with automatic verification after every publish.

Two conditions are non-negotiable at this rung: every action leaves a trail of what it saw and why it acted, and every action can be undone or is low-stakes enough that undo doesn't matter. Promote one category at a time, based on the evidence from rung 2, not on optimism.

## What stays gated, permanently

Some things never climb the ladder, no matter how good the agent gets:

- **Money movement.** Payments, refunds, payroll, anything touching a bank or card.
- **Customer commitments.** Pricing, timelines, scope. An agent can draft the proposal; a human sends it.
- **Public or external sends** outside explicitly pre-approved categories.
- **Access and credentials.** Granting permissions, sharing logins, rotating keys.

These are not training wheels waiting to come off. One bad autonomous action in these categories can cost more than years of saved clicks. The gate is the design, not a limitation of it.

## The 30-day plan, in one list

- Week 1: triage, monitoring, summaries. Read-only. Calibrate.
- Weeks 2-3: drafts for email, invoices, documents. Measure your edit rate.
- Week 4: promote the categories you stopped editing to bounded, logged, reversible writes.
- Forever: money, commitments, public sends, and credentials stay behind a human gate.

If a vendor tells you their agent can safely do all of this on day one, ask them the two questions at the top of this post about each task. The answers sort themselves.

This ladder, including the promotion evidence we require at each rung and the one capability we had to demote, is documented in full in [One Agent, One Company ($9.97)](https://opsbyagent.com/book). Get it if you want the rollout plan with the mistakes already made for you.