Free to read · no account needed

16 min · agents

Team playbook: who owns the agent

Goal: assign clear owners so agent tools do not become everyone’s vague responsibility.

Best for: small teams starting to share agents, skills, or connectors.

Shared agents fail socially before they fail technically. Nobody knows who can revoke access, who approves sends, or who gets paged at 2 a.m. when a weekly brief posts to the wrong channel. Write owners before you share connectors.

Every shared agent needs: a business owner (why it exists and what “good” means), a technical owner (how it is set up and how to kill it), and an on-call path for “it did something weird.” Link this to Logging what matters and Blast radius—ownership without logs is theater.

Why beginners skip this

Shared agents with no named owner feel fine until an incident lands and nobody knows who can kill the run. Vague ownership is how tools become everyone’s problem and no one’s job.

Habit this week (Asia/Shanghai): write business owner, technical owner, and kill-switch person on one page—date it before any shared agent goes live.

Step 1 — Name the two owners

Write human names, not only team names. A backup person is optional but worth one line.

For agent/job [name], propose business owner vs technical owner responsibilities in a simple table.
Include: who can revoke access, who approves external send, who updates the one-pager.
Use placeholders like Alex / Sam if real names unknown.
Example

Filled prompt

Weekly research agent that drafts a Monday brief from public sources.
PM = business owner; eng/ops = technical owner.
Table of duties including revoke + send approval + one-pager updates.

What good output looks like

  • Done boxes for “assign clear owners so agent tools do not become e” are explicit and checkable
  • Allow-list tools only; never-do lines honored
  • Stops before send/delete without human gate
  • Pass/fail: Plan→Act one→Check visible for agents-team-playbook
  • Pass/fail dated (Asia/Shanghai) sits next to the artifact

Step 2 — Incident mini-runbook

If a weird action happens: pause/kill → snapshot log → revoke if needed → tell stakeholders. Practice once on a dry run (fake wrong-send) so panic night is not the first rehearsal.

Write a 7-step incident mini-runbook when an agent may have sent/deleted wrongly.
Audience: non-engineers. Include who to ping and what not to delete.
Example

Filled prompt

Shared agent can open PRs.
Owner card: business · technical · kill-switch (who reverts OAuth).
Revoke for contractors not on card.

What good output looks like

  • Pause/disable schedule first
  • Preserve evidence (screenshot, log row)
  • Communication step with owners named

Step 3 — Monthly ownership review

Confirm owners still correct; rotate if someone left; re-read permissions. Fifteen minutes beats a surprise orphan agent.

Draft a monthly 15-minute ownership review agenda for shared agents.
Include: owner confirmation, permission skim, one incident lesson (or “none”).
Example

Filled prompt

Shared agent: "inbox triage helper" used by 4 people, no owner named.
Write three-line card: business owner · technical owner · kill-switch path (who revokes OAuth in <2 min).
Flag current risk of orphan access.

What good output looks like

  • Allow-list tools only; never-do lines honored
  • Stops before send/delete without human gate
  • Pass/fail: Plan→Act one→Check visible for agents-team-playbook
  • Done boxes for “assign clear owners so agent tools do not become e” are explicit and checkable

Names not teams

Owner = human name + backup. “Engineering” is how orphans happen.

Red flag

No named owner; everyone can approve writes; incident with no retrospective owner—fix before sharing the agent.

Save this card

Card: business owner · technical owner · kill-switch person · log place. No named trio → no shared agent.

1. What I shipped: ___ 2. What I refused: ___ 3. What I will never-do again: ___ (date: Asia/Shanghai)

  • [ ] Tools/writes paused
  • [ ] Refuse-line dated
  • [ ] Artifact path saved
  • [ ] Next link chosen (or stop)

Before you start

Write Done (checkboxes) and the human gate on paper before any run for “assign clear owners so agent tools do not.” Allow-list tools; leave send/delete off. Guide: agents-team-playbook. If you only have a blank practice box, stop and fetch the real job first.

  • Goal in one line: ___
  • Allowed tools: ___
  • Forbidden: ___
  • Human approve needed for: ___

How to use this week

For one shared agent/job, fill: business owner · technical owner · kill-switch path. Share the card in the team doc. Revoke access for people not on the card. on a live artifact—not a blank demo. Write one refuse-line and date the note (Asia/Shanghai). If you only skimmed agents-team-playbook, put 25 minutes on the calendar and redo once.

Close the week by quoting aloud the refuse line you actually used once. If you cannot, rerun Practice now and date the pass/fail (Asia/Shanghai).

Pitfalls

PitfallFix
Owner = “the team”Name humans + backup
No incident pathWrite mini-runbook before share
Orphan agents after someone quitsMonthly review on the calendar
Owners without kill-switch rightsTechnical owner must be able to disable
Example

Filled prompt

Temptation: skip the habit for agents-team-playbook to “save five minutes.”
Job still: assign clear owners so agent tools do not
Do the smallest correct pass: Done visible · one checkable artifact · Unknowns labeled [?].
Boundaries: draft only; no silent send; no invented metrics.
Return: the artifact + the refuse-line you said aloud.

What good output looks like

  • Names the shortcut you refused (specific to agents-team-playbook)
  • Still delivers a checkable artifact for “assign clear owners so agent tools do not”
  • Unknowns labeled; draft-only respected
  • Pass/fail: refuse-line written and dated (agents-team-playbook #4)

Practice now

Live card: run one agent checklist item on a real job for “Team playbook: who owns the agent”—artifact path on Save (Asia/Shanghai).

Today: draft a one-page playbook: owner, approver, kill-switch person, log location. Get one teammate to confirm the owner line. Date it (Asia/Shanghai).

Today card (copy) — agents-team-playbook: 1. Artifact I will produce: ___ 2. Pass/fail check: ___ 3. Refuse-line if tempted to skip verify/send: ___ (date: Asia/Shanghai) 4. One never-do from this guide: ___

  • [ ] Artifact path written
  • [ ] Refuse example would say "yes"
  • [ ] Dated Asia/Shanghai

One sentence takeaway

Name business owner, technical owner, and kill-switch before any shared agent goes live. This week: one dated one-pager with those three roles (Asia/Shanghai).

Next

Logging · Blast radius · Checkpoints · Subagents and handoffs · Define done and permissions

Pair with today: open the first Next link (agents-logging-what-matters) only after you dated a refuse-line for this guide (Asia/Shanghai).

← Back to home · Learn · Tools · Compare · Start