Reconciling duplicate records
A bounded agent may compare a preselected queue but merges require preview and approval. Expected disposition: Proceed with controls.
Task boundary
Reconciling duplicate records is assessed as a specific task and workflow, not as a general endorsement of AI for the surrounding job. A bounded agent may compare a preselected queue but merges require preview and approval.
Assumptions
- The agent receives a preselected queue and cannot search or merge outside it.
- A deterministic comparison identifies exact duplicates before AI handles ambiguous pairs.
- Every merge has a complete preview, human approval, and tested rollback.
Decision
- Disposition: Proceed with controls
- Pattern: Bounded agent
- Inherent risk: high
Rules that drive the decision
- Ambiguous comparison may require adaptive steps, but write access makes permission and stop boundaries mandatory.
- Irreversible or unreviewed merging would require redesign; bounded reversible merging may proceed with controls.
Why alternatives were rejected
- Fully autonomous merging can irreversibly lose information.
- A direct prompt cannot inspect or modify records safely.
Controls
- Limit records, fields, merge direction, run duration, and total merges outside the model.
- Preserve both source records and show every retained, overwritten, and conflicting value.
- Stop on uncertain identity, concurrent edits, missing history, permission expansion, or rollback failure.
Acceptance threshold
These are example starting thresholds for a bounded pilot of this workflow, not universal benchmarks. For reconciling duplicate records, the accountable owner should make them stricter when the task, consequence, or policy requires it.
- No record outside the queue is read or changed, and no ambiguous pair merges without exact approval.
- Rollback restores both records for every failure injection, and repeated execution cannot duplicate a completed merge.
Reassess when
- The queue source, identity rules, writable fields, merge volume, or rollback mechanism changes.
- The workflow gains deletion rights or permission to resolve identity without approval.
