STATEMETHOD

The State Method

Give every workflow a known state.

Models are useful because they can interpret inputs that do not fit clean rules. That same flexibility should not decide workflow authority. The State Method separates interpretation from state, permissions, validation, approval and recovery, then tests the complete workflow before expanding its scope.

The method applies to one bounded workflow at a time. It produces a decision, not an assumption that every prototype should reach production.

Five states / one decision

Bound, evaluate, control, recover, decide.

01 — Bound

Define exactly where the workflow starts, where it ends and who remains responsible for its outcome.

Record the workflow owner, business objective, inputs, outputs, connected systems, current baseline, known exceptions and any consequential action. Exclude adjacent work that cannot be evaluated under the same owner and acceptance criteria.

Output A bounded workflow that can be observed and measured.

02 — Evaluate

Test the workflow on evidence that resembles real operating conditions.

Build representative cases, known failures, ambiguous inputs and edge cases. Compare the proposed behavior with the current baseline. Define decision thresholds before drawing a conclusion. Record uncertainty and abstention rather than treating every output as complete.

Output An evaluation summary that shows what worked, what failed and what remains unknown.

03 — Control

Decide what the model may propose, what software must enforce and what a person must approve.

Define workflow states, input checks, business rules, permissions, tool access and action boundaries. Place approval where a mistake has operational, financial, contractual, safety or reputational consequence.

Output A permission model and explicit approval path.

04 — Recover

Make failure visible and recoverable before the workflow can affect real operations.

Identify observable failures and the signal for each one. Specify timeouts, retries, idempotency, safe stops, escalation, manual fallback and recovery. Preserve enough context to reconstruct what happened.

Output A failure register and route back to a valid state.

05 — Decide

Use the evidence to choose the next controlled step.

The decision may be to proceed, change the design, gather more evidence, keep the workflow manual or stop. A pilot is justified only when its remaining assumptions can be tested within a bounded scope.

Output A reasoned go/no-go recommendation.

Authority model

Three kinds of authority stay separate.

Model interpretation

The model may extract, classify, summarize, recommend, identify uncertainty or produce a draft. These are proposals inside a defined task.

Deterministic system authority

The surrounding software controls input validation, workflow state, calculations, business rules, permissions, retries, idempotency, logging, approval gates and access to consequential actions.

Human responsibility

A named person reviews consequential output, approves or stops the workflow, corrects errors, handles exceptions and decides whether work should proceed. Human approval is an assigned operating responsibility, not a generic “human in the loop” label.

State-transition reference

The valid path and the failure path are explicit.

Main path — Input → Interpret → Validate → Approve → Act

  1. Input: Received, identified and checked against the workflow boundary.
  2. Interpret: The model produces a structured output, draft or uncertainty signal.
  3. Validate: Software checks schema, permissions, business rules and required evidence.
  4. Approve: The named owner accepts, corrects or rejects the proposed action.
  5. Act: An authorized tool performs only the approved operation.

Failure path — Stop → Log → Review → Recover

  1. Stop: Prevent the workflow from advancing from an invalid, uncertain or unauthorized state.
  2. Log: Record the input, state, decision, error and available evidence.
  3. Review: Route the case to the responsible person or support path.
  4. Recover: Correct, retry safely, fall back to manual work or close the case.

A workflow should not jump from interpretation to action unless its approved design explicitly allows that action and the consequence warrants it.

Recoverable operation

Failure is part of the workflow.

A retry is not a recovery plan by itself. Repeating a bad request can duplicate an action or hide a persistent fault. Recovery defines which failures may retry, how duplicate work is prevented, what context is retained, when a person is alerted and which safe state receives the case. Some failures should end in manual handling or a stop decision.

Diagnostic

The method maps the boundary, tests available evidence, defines controls and produces a go/no-go decision. No production deployment is included.

Controlled Pilot

The method becomes working software in a sandbox or staging environment. Representative cases, real integrations, approvals, logs and recovery behavior are tested against acceptance criteria.

Production System

The method governs hardening and operations. Owners, access, monitoring, evaluation cadence, change control, incident response and recovery are defined for the proven scope.

FAQ

Before the next decision.

Is this a software architecture standard?

No. It is a delivery method for deciding and testing how one AI-assisted workflow should operate. The implementation depends on the workflow and existing systems.

Does every action require manual approval?

No. Approval should match consequence. Low-consequence, reversible actions may be permitted automatically after validation. Consequential actions need explicit authority and, where required, a named human approver.

Can this method be applied to an existing prototype?

Yes. Existing code, evaluations and operating evidence can be reviewed. The next stage depends on what that evidence demonstrates, not on how mature the prototype is described.

What if evaluation exposes a poor use case?

The recommendation can be to narrow the workflow, collect better examples, keep the process manual or stop. Avoiding an unsupported build is useful output.

Continue with the evidence

Review the next relevant boundary.

Workflow assessment / first step

Apply the method to one workflow.

Share the current process, expected output, review owner and baseline. Do not send confidential material through the form.