AGENTIC UI SHIPPING CHECKLIST (2026)

Use this to ship an operator workflow that users trust after the demo.

1) Scope (don’t skip)
- Primary business object: __________ (ticket / invoice / PR / lead / calendar event)
- Lifecycle step: __________ (triage / reconcile / schedule / review / close)
- Allowed actions (finite list): __________
- Explicit “never do” actions: __________ (e.g., send external email, delete records, run payments)

2) Plan-first UX
- The system produces a step-by-step plan BEFORE executing.
- Each step names: tool, target system, target object, and intended change.
- User can edit or remove steps (not just cancel).
- Any destructive/external step requires a confirmation gate.

3) Permissions as product
- Permissions requested are tied to the plan (no blanket OAuth requests by default).
- Scopes are human-readable in the UI.
- Access is revocable from inside your product.
- Admin policy exists (even if minimal): allow/deny tools, restrict projects/workspaces.

4) Receipts & audit trail
- Every external call writes an append-only log entry.
- Log includes: actor (human/service account), time, tool name, target object IDs, request payload reference, response reference, status.
- Users can view a “what changed” timeline per object.
- Support/debug UI exists for failed runs.

5) Reliability basics for operators
- Idempotency keys for every side-effecting action.
- Safe retries and clear error handling.
- Rate-limit/backoff behavior per connector.
- Dry-run mode for new connectors and new workflows.

6) Reversibility
- Undo path exists for reversible actions (drafts, labels, comments, PRs).
- For irreversible actions: approvals, scheduling, or staging is mandatory.
- Post-action verification step exists (e.g., re-fetch object and display diff).

7) Launch criteria
- A user can answer: “What did it do?” “Where?” “Under whose authority?” using your UI.
- A user can answer: “How do I undo it?” in one click or one obvious workflow.
- A user can answer: “What access did I grant?” without leaving the product.

If you can’t satisfy plan + permissions + receipts + undo, don’t ship ‘an agent.’ Ship the missing control plane first.