# What this is about AI agent evaluation should measure the agent's observable behavior and the resulting service state, not rely on the agent's explanation. The article provides a practical contract and an example offline Python grader that distinguishes control violations, inappropriate decisions, missing evidence, and true task outcomes.
# Core ideas Evaluation must preserve four separate threads: the conversation (what the agent claims), the execution receipts (what tools attempted and executed), the service checks (whether the target operation actually works), and ticketing records (whether closure or escalation occurred). Combining these into a single quality score hides meaningful failures.
The grader model in the article returns three verdicts—PASS, FAIL, INCONCLUSIVE—plus reasons an engineer can act on. It is designed to be used by a trusted evaluation harness that supplies observations. The agent must not be able to control or fabricate the evidence path.
# Concrete checks to run
- Execution controls: Were executed actions authorized and tenant-isolated? Example failure: a tool modified another customer's record.
- Agent behavior: Were the attempted and terminal decisions appropriate for the scenario? Example failure: attempting an explicitly prohibited operation.
- Workflow outcome: Did the required closure or escalation actually occur? Example failure: agent claimed escalation but no handoff record exists.
- Evidence sufficiency: Is there enough trustworthy information to reach a decision? Example failure: a required execution receipt is missing.
A favorable final-state check does not cancel a control violation. Missing evidence must not be treated as a pass merely because the agent's explanation appears correct.
# Implementation pattern
# Operational guidance
- Design scenarios that force different decisions so the grader can exercise boundary conditions and escalation logic.
- Measure repeatability explicitly and surface retries rather than hiding them in averages.
- Make the evaluation gate a release decision: only pass builds with verified autonomous resolution.
# Bottom line A passing explanation is not a substitute for a passing workflow. Build evidence pathways that the agent cannot manipulate, grade execution, behavior, and outcomes separately, and use explicit verdicts so engineers can investigate and fix the right problems.