Sub-function
End-User Compute
Owns device work end to end inside Information Technology. Runs 3 lines across 19 stations, drains the repeatable share into the IT tower, and holds 2 human gates.
Estate rating
A
78 / 100
Imaging, enrollment and patching are deterministic and reversible. Only spend commitments and persistent non-compliance reach a person.
Agents
8
Lines
3
Units / wk
2,229
Timetable vs actual
11.5h → 11.9h
Cost / unit
$9.30
was $29
Run-rate saving
$2.3M
annualized at this volume
The 8 agents running this sub-function
Grouped by what they are for, not by where they sit. The agent org is process-shaped.
End-User Compute Orchestrator
Owns the end-user compute lane end to end. Sequences the other agents, holds the timetable, and decides what surfaces to a human.
ceiling A4 · escalates to Escalates to Director, Workplace Technology when the unit falls outside the decision envelope or confidence drops below the floor.
Device Provisioning Agent
Runs the repeatable portion of end-user compute inside the shared transaction spine at spine cost and spine controls.
ceiling A4 · escalates to Escalates to Director, Workplace Technology when the unit falls outside the decision envelope or confidence drops below the floor.
Patch Compliance Agent
Executes the end-user compute step it owns, posts its evidence, and hands the unit to the next stage.
ceiling A4 · escalates to Escalates to Director, Workplace Technology when the unit falls outside the decision envelope or confidence drops below the floor.
Software Deployment Agent
Executes the end-user compute step it owns, posts its evidence, and hands the unit to the next stage.
ceiling A4 · escalates to Escalates to Director, Workplace Technology when the unit falls outside the decision envelope or confidence drops below the floor.
Refresh Planning Agent
Executes the end-user compute step it owns, posts its evidence, and hands the unit to the next stage.
ceiling A4 · escalates to Escalates to Director, Workplace Technology when the unit falls outside the decision envelope or confidence drops below the floor.
Device Health Agent
Watches end-user compute continuously. Detects drift, quantifies it, and routes what matters without waiting for a reporting cycle.
ceiling A4 · escalates to Escalates to Director, Workplace Technology when the unit falls outside the decision envelope or confidence drops below the floor.
Device Policy Agent
Holds the rules that bind every other agent in end-user compute. Versions them, tests them against live decisions, and blocks work that breaches them.
ceiling A4 · escalates to Escalates on any decision that would breach a live policy version, with the clause cited.
End-User Compute Challenger Agent
Adversarial reviewer for end-user compute. Argues the opposite case on every position and flags where the evidence does not carry the claim.
ceiling A4 · escalates to Escalates when a ratified position is still running against a break condition it flagged.
Estate rating breakdown
Seven control dimensions. Judgment readiness runs against autonomy on purpose.
People
What the humans stopped doing, and what they do now.
Redeployed into customer-facing escalation ownership.
Lines running in this sub-function
Each line is a workflow. Click a line to walk it station by station.
Strategy positions this sub-function holds
An agent that only executes is a robot. These are the calls it made, the argument against each one, and what would prove it wrong.
End-User Compute Operating Position
Ratifiedv1Should device work stay in the shared transaction spine, or come back inside the function where the context lives?
Hold the ceiling at A4 for end-user compute. Imaging, enrollment and patching are deterministic and reversible. Only spend commitments and persistent non-compliance reach a person. Raise it only after two consecutive quarters where the override rate stays under five percent and every override has a written cause.
confidence
78%
The challenge — End-User Compute Challenger Agent
End-User Compute Challenger Agent argues the recommendation leans on 2 quarters of data from a period with no volume shock. The confidence band overlaps the alternative, and the position does not say what it would take to be wrong. Recorded as a dissent, not a block.
Break conditions
- ·Override rate rises above 12 percent for two consecutive months
- ·Cost per device stops falling while volume keeps rising
- ·A control failure in this lane reaches a customer or a regulator
Evidence gaps
- ·No external comparator on a like-for-like unit definition
- ·Exception cases under $49k are sampled, not fully measured
| Alternative considered | Cost | Risk | Verdict |
|---|---|---|---|
| Hold the current position | $268k run rate | Known and priced. Cedes ground if comparators move faster. | not selected |
| Raise the ceiling one level now | $1091k to build controls | Override rate is 13 percent; raising the ceiling before that settles imports the error into production. | rejected on evidence |
| Move the exception tail to the spine | $987k transition | Loses local context. Rework risk on the cases that are hardest to recover. | selected |
Ratified 9 months ago. Measured since: cost per device fell 21 percent against a forecast of 39 percent.
Policy register
The rules the agents above are bound by. Version, owner, approver, and the agents each rule constrains.
| Ref | Rule | Scope | Owner agent | Approved by | Version | Status |
|---|---|---|---|---|---|---|
| IT3-POL-200 | End-User Compute Decision Envelope Agents in this lane may act without a human when the device sits inside the stated value, risk and confidence envelope. Outside it, the unit holds at a gate with a named approver and a running clock. binds 4 agents · APAC | envelope | Device Policy Agent | Director, Workplace Technology | v2.6 | under review |
| IT3-POL-201 | End-User Compute Evidence Standard Every autonomous decision writes inputs, the rule version applied, the model and prompt version, the output and a reversal path. An action with no evidence record is treated as a control failure, not a fast decision. binds 4 agents · LATAM · US | evidence | Device Policy Agent | Director, Workplace Technology | v2.8 | Active |
| IT3-POL-202 | End-User Compute Escalation Rule Escalation is mandatory when confidence falls below the floor, when two options sit inside the confidence band, or when a break condition on a ratified position fires. Director, Workplace Technology owns the response clock. binds 4 agents · LATAM · US | escalation | Device Policy Agent | Director, Workplace Technology | v5.3 | under review |