DESIGNER GUIDE
Build an agentic worker
Create a specialised worker that understands natural-language requests, follows clear business instructions and uses only the models, tools, knowledge and safety controls you approve.
Scope: individual Agentic Worker project
Give the worker one clear responsibility
What is an agentic worker?
An agentic worker uses an AI model to interpret information and decide how to respond within the instructions and capabilities you provide.
- An identity and worker type
- Business-specific instructions
- A model and credential
- Extension tools and reusable flows
- Guardrails
- Short-term or long-term memory
- Knowledge bases
- Execution limits
Agentic worker versus deterministic flow
| Use an agentic worker when | Use a deterministic flow when |
|---|---|
| The input is open natural language | The process must follow explicit steps |
| The intent must be interpreted | Decisions must follow fixed business rules |
| The worker must choose between approved capabilities | Inputs, validations and outcomes must be controlled |
| A flexible response is acceptable | The same inputs must reliably follow the same path |
| Knowledge retrieval or limited tool selection is needed | Approvals, transactions or compliance steps are involved |
Many Greentic solutions combine both. An agentic worker understands the request, while a deterministic flow performs the controlled business process.
The example used throughout this guide
ACME, the project names, model names and all test values are fictional demonstration data.
- Worker
- ACME Support Process Router.
- Purpose
- Classify an open-text customer-service request and return structured routing data.
- Called by
- ACME Customer Service Main Menu.
- Possible outcome
- Route a late-delivery request to ACME Late Delivery Resolution.
Customer enters an open question
↓
Customer Service Main Menu flow
↓
ACME Support Process Router
↓
Structured intent result
↓
Deterministic resolution flowOn this page
Before you begin
- Confirm that the correct workspace is active.
- Define one specific responsibility for the worker.
- Decide what the worker must never do.
- Identify the expected input and output.
- Confirm that a suitable model credential is available.
- Identify any tools, flows or knowledge bases the worker requires.
- Decide whether the worker needs memory.
- Prepare representative test messages.
- Use fictional data during design and testing.
1. Create an Agentic Worker project
Start from Designer Home and choose the Agentic Worker project type.
- 1Open Designer Home.
- 2Select New project.
- 3Enter a clear project name.
- 4Select Agentic Worker.
- 5Review the project-type description.
- 6Select Create.
- 7Wait for Agentic Worker Studio to open.
The New Project dialog also offers other project types, including flows, playbooks and imports. This guide covers only Agentic Worker. SoRLa Studio is shown in the dialog as Coming soon.
2. Describe the worker in Agentic Worker Studio
Studio generates a first configuration from a plain-language description of the worker's goal.
- Goal field
- Describe what the worker should do, what it receives and what it should return.
- Model selector
- Select the model available for generating the initial worker configuration.
- Example use cases
- The interface provides starting ideas such as customer support, sales follow-up, help centre bot and customer onboarding.
- Build my Agentic Worker
- Generate the first worker configuration from the supplied description.
Create a worker called [name].
Its single responsibility is to [specific responsibility].
It receives:
- [input 1]
- [input 2]
It must return:
- [output 1]
- [output 2]
It may:
- [approved action]
It must not:
- [prohibited action]
When uncertain, it should:
- [clarification or escalation behaviour]- 1Describe one clear worker responsibility.
- 2Include the expected inputs.
- 3Include the expected output.
- 4State important non-goals.
- 5Explain what should happen when the request is ambiguous.
- 6Select the generation model.
- 7Select Build my Agentic Worker.
- 8Review every generated setting in Composer.
Understand the configuration tabs
Composer groups the worker's configuration into tabs, each answering one question.
| Tab | Main question |
|---|---|
| Identity | Who is this worker and what type is it? |
| Behaviour | What should it do and how should it behave? |
| Model | Which configured model powers it? |
| Tools | What approved actions can it perform? |
| Guardrails | Which safety controls should apply? |
| Memory | What should it remember between messages? |
| Knowledge | Which approved knowledge bases may it answer from? |
| Limits | How much room does it have to plan, call tools and respond? |
3. Configure identity and worker type
Identity defines who the worker is and how it operates.
- Display name
- The human-readable name shown to designers and operators.
- Description
- A concise explanation of the worker’s role.
- Single-turn
- Designed for focused interactions and everyday tasks. It can respond and use approved tools without running a long autonomous process.
- Agent graph
- Designed for multiple specialist agents working together, with one deciding which specialist handles the work.
- Deep worker
- Designed for longer, multi-step jobs that require planning and checking progress.
The available capabilities of each worker type may evolve. Use the descriptions shown in the current Designer interface as the source of truth.
4. Write precise behaviour instructions
Behaviour is where the worker's responsibility, boundaries and output contract are defined.
- Tone
- An optional description of how the worker should communicate, for example warm, concise or professional. For a machine-facing router, tone may be irrelevant because the worker returns structured data rather than customer-facing prose.
- Instructions
- The main business-specific instruction document. The platform may add standard behaviour and operational controls around these instructions.
- Opening message
- A message shown when the worker begins a customer-facing conversation. For an internal process router invoked by a flow, leave this blank.
- 1Role — state what the worker is.
- 2Single responsibility — state exactly what it must accomplish.
- 3Inputs — list the fields it receives.
- 4Outputs — define the required response structure.
- 5Allowed actions — state what it may do.
- 6Prohibited actions — state what it must not do.
- 7Ambiguity handling — explain when to ask a clarification question or return an uncertain result.
- 8Escalation — state when human support or another controlled process is required.
5. Select the model
Choose from the model credentials that have been made available to the workspace.
- Credential
- Select a model credential made available to the workspace.
- Provider
- The AI provider associated with the selected credential.
- Model
- The exact model identifier used by the worker.
- Temperature
- Controls how consistently or creatively the model responds. For structured classification, use a relatively precise setting and test whether the same request produces stable output.
- Maximum reply length
- Limit the size of the worker’s response where a concise result is expected.
The provider, credential and model shown in the screenshot are examples. Do not treat them as required Greentic defaults.
6. Add tools and reusable flows
Tools decide what the worker is actually able to attempt.
- Extension tools
- Installed extensions expose approved capabilities to the worker. The interface provides Add extension, search, a category filter, a description of each extension and an Add action.
- Flow as tool
- An existing flow can be made available as a callable tool where that architecture is appropriate.
- 1Open the Tools tab.
- 2Decide whether the worker genuinely requires a tool.
- 3Select Add extension or Add flow as tool.
- 4Search for the required capability.
- 5Review its description.
- 6Add only the required capability.
- 7Update the Behaviour instructions to explain when it may be used.
- 8Test successful, failed and ambiguous cases.
7. Apply guardrails
Guardrails add safety controls around what the worker receives and returns.
- Guardrails can be suggested by AI.
- A suggested guardrail can be removed.
- Add guardrail opens the available guardrail choices.
- The interface shows whether the underlying protection is installed.
- A selected guardrail marked Not installed will not run.
The options visible in this release include PII masking, a profanity filter, a secret-leak guard and a topic or scope guard. The list shown in the interface is not permanent or exhaustive.
- 1Review the worker’s exposure to untrusted input.
- 2Open Guardrails.
- 3Review any AI-suggested controls.
- 4Add only the controls relevant to the use case.
- 5Check the installation status.
- 6Contact the partnership or platform administrator when a required capability is not installed.
- 7Test the guardrail with safe fictional input.
- 8Confirm that legitimate requests still pass.
8. Configure memory
Memory determines what context the worker carries between messages.
- Short-term memory
- Used when the worker needs context between messages within an active interaction.
- Long-term memory
- Used when the solution requires information to persist beyond the immediate interaction, according to the selected provider’s configuration.
- Provider controls
- Each memory type includes an enable or disable toggle, provider selection, Configure and Remove.
Exact retention, storage and retrieval behaviour depends on the selected memory provider and its configuration.
9. Set execution limits
Limits control how much room the worker has to plan, call tools and respond.
- Light
- Best suited to simple lookups, focused classification and short replies with limited back-and-forth.
- Standard
- The default choice for typical conversations that may require a small number of tool calls.
- Heavy
- Intended for longer multi-step research or investigation that requires more extensive work.
Use the current interface descriptions as guidance. Test the worker rather than assuming a higher limit will automatically improve it. Composer may recommend a limit and include a reason; designers can remove the suggestion and select another level. The selected limit should match the worker’s actual responsibility.
Attach trusted knowledge when required
The Knowledge tab controls which prepared knowledge bases the worker can answer from.
- Policies
- Product information
- Procedures
- Support content
- Internal documentation
10. Test the worker
Test directly in Composer and check the response against the expected contract.
- The user enters an open customer request.
- The worker detects a likely late-delivery intent.
- The response includes structured fields.
- The result identifies the deterministic process intended to handle the request.
- The test panel includes Reset chat for starting a clean test.
The exact fields in the screenshot are specific to this demo and may include status, detected intent, confidence, extracted values, locale, a clarification question, possible intents, the called process and escalation indicators. Greentic does not automatically create or validate this exact schema for every worker.
- 1Open the Composer test panel.
- 2Reset the chat before testing an independent scenario.
- 3Enter a representative request.
- 4Confirm that the worker identifies the correct intent.
- 5Confirm that required entities are extracted.
- 6Confirm that uncertain requests produce the expected clarification behaviour.
- 7Confirm that prohibited actions are not attempted.
- 8Confirm that the output matches the downstream flow’s expected structure.
- 9Repeat the same request with alternative wording.
- 10Test at least one clearly unrelated request.
- 11Test a failure or missing-information case.
- 12Correct the instructions or configuration and test again.
| Test type | What to confirm |
|---|---|
| Clear request | The correct intent or capability is selected |
| Alternative wording | Different customer phrasing produces the same intended route |
| Missing information | The worker asks for clarification or returns an incomplete status |
| Ambiguous request | The worker does not invent certainty |
| Unsupported request | The worker returns the approved fallback or escalation result |
| Adversarial request | Installed guardrails and instructions prevent unsafe behaviour |
| Repeated test | The response remains sufficiently stable for downstream processing |
11. Review before publishing
Work through this checklist before handing the worker to a release process.
- The worker has one clear responsibility.
- The display name and description are meaningful.
- The worker type matches the task.
- Behaviour instructions define inputs, outputs and non-goals.
- The opening message is appropriate for how the worker is invoked.
- The required model credential is selected.
- Temperature and response length match the use case.
- Only required tools or flows are attached.
- Required guardrails are installed, not merely selected.
- Memory is enabled only when needed.
- The execution limit matches the complexity of the task.
- Representative tests produce the expected result.
- Ambiguous and unsupported requests follow the approved fallback.
- Machine-facing output matches the downstream contract.
- No real customer data was used during testing.
Troubleshooting at a glance
| Problem | Likely cause | Action |
|---|---|---|
| Build my Agentic Worker is unavailable | The goal is empty or no generation model is available | Enter a clear goal and confirm that a model is selectable |
| The worker returns generic customer-facing text | Its role and output contract are not specific enough | Strengthen the Behaviour instructions and define the exact output |
| The worker attempts to resolve the issue itself | Its non-goals or boundaries are missing | State that resolution belongs to the deterministic flow |
| The worker selects the wrong process | Intent descriptions overlap or too few test examples were considered | Refine the routing definitions and test alternative wording |
| The output cannot be used by a flow | Fields are missing, inconsistent or surrounded by extra prose | Define a stable structured-output contract and test it explicitly |
| A model is missing | The required credential is not available to the workspace | Ask the administrator to configure or expose the provider |
| A tool is not available | The extension or flow has not been installed, published or exposed | Review the workspace tools and administrative configuration |
| A selected guardrail will not run | The underlying capability is marked Not installed | Ask the administrator to install and configure the capability |
| The worker uses context it should not retain | Memory is enabled unnecessarily | Disable or reconfigure the relevant memory provider |
| The worker performs too much work | The instructions are too broad or the execution limit is excessive | Narrow the responsibility and select a lighter limit |
| Independent tests influence each other | The previous test conversation remains active | Use Reset chat before each independent scenario |
| The same request produces inconsistent routing | Instructions, model settings or output constraints are too loose | Clarify the decision rules, lower variability and repeat the test |
