Topics/Agent Design Lifecycle
ADPS Topic Research
Agent Design Lifecycle: From Capability Registration to Evolution and Retirement
Manage how an agent capability enters, operates in, changes within, and leaves production.
A working prompt, skill, or tool set proves that one implementation path can run. Production also requires an owner, a business scope, release evidence, runtime outcomes, revalidation triggers, and conditions for reducing or revoking authority.
These decisions have a temporal order. ADPS groups them into six stages: registration, design, validation, operation, revalidation, and evolution. The lifecycle does not occupy a cell in the dual-axis matrix. It manages capability versions and the evidence required for each state transition.
The six stages
| Stage | Engineering question | Principal artefacts |
|---|---|---|
| Register | What is the capability, who owns it, what may it process, and what is its initial risk class? | capability_id, owner, business scope, data and tool boundaries |
| Design | How are goals represented, where does state live, which tools are admitted, and which actions require approval? | Goal and Intent Contracts, state schema, tool allowlist, acceptance conditions |
| Validate | Does the version pass offline cases and behave correctly under controlled production traffic? | Eval suite, thresholds, regression results, shadow or canary record, release recommendation |
| Operate | What authorizes each run, which state changed, and what receipt proves the effect? | Intent, Approval, ActionEvent, checkpoints, business ledger, external receipts |
| Revalidate | Did delayed outcomes hold, did the distribution drift, and did cost, errors, or intervention rates change? | Attribution report, regression cases, incident record, revalidation evidence |
| Evolve | Should the version be promoted, held, demoted, rolled back, or retired? | Version diff, change decision, rollback point, authority adjustment, retirement record |
Validation includes offline evaluation and controlled production validation
Offline evaluation and canary release belong to the same lifecycle gate, but they test different things. Offline evaluations use fixed cases and graders to compare versions and protect regressions. Shadow traffic, canaries, and limited rollout test behaviour under the real distribution, including tool side effects, authorization, latency, resource use, and external acceptance.
A validation record therefore needs both forms of evidence. An offline score cannot replace production receipts, and one successful canary cannot replace a stable regression suite.
The lifecycle record
The lifecycle begins as a queryable data object. The following structure binds a capability version to release evidence, runtime constraints, revalidation triggers, and retirement conditions.
capability_id: payroll.allowance.change
version: v3
owner: payroll-platform
status: active
scope:
employee_groups: [singapore-full-time]
fields: [transport_allowance]
effective_date_rule: next-pay-period
release_evidence:
eval_suite: allowance-change-2026-08
regression_result: passed
canary_window: 2026-08-20/2026-08-22
external_acceptance: payroll-read-after-write
runtime_policy:
approval_required_above: 200
max_batch_size: 20
toolset_version: payroll-tools-v12
rollback_to: v2
revalidate_when:
- policy_version_changed
- tool_schema_changed
- owner_changed
retire_when:
- payroll-api-v1-removed
Release gates, runtime events, revalidation jobs, and retirement workflows should all reference the same capability_id and version. A status field maintained only in prose will drift from the running system.
Evidence for stage transitions
| Transition | Minimum evidence | Decision owner |
|---|---|---|
| Register → Design | Owner, scope, and data and tool boundaries are recorded | Product or business owner and system owner |
| Design → Validate | Contracts, state, authority, failure handling, and acceptance probes are testable | Design and test owners |
| Validate → Operate | Capability and regression results pass; canary has no blocking issue; rollback works | Release approver |
| Operate → Revalidate | Runtime samples, external outcomes, human interventions, and anomalies are aggregated | Capability owner and operations or risk owner |
| Revalidate → Evolve | The issue is attributed to a component or boundary; change target and protected cases are explicit | Change approver |
| Evolve → New version | Version diff, migration, authority changes, and rollback point are recorded | Capability and platform owners |
How patterns participate
Patterns recur across stages and do not form a fixed one-to-one map. Design may use P1 Context Triage, A2 Plan-and-Execute, and G1 Approval Gate to define the runtime structure. Validation may use X2 Evaluation & Validation, G2 Blast-Radius Control, and A4 Guardrail Sandwich to establish a release boundary. Operation often requires A1 Tool Dispatch, X1 Observability, and M3 Progress Tracking. Revalidation and evolution may call on F1 Generator-Critic, M4 Failure Journals, F3 Experience Replay, and G3 Progressive Commitment.
The actual combination depends on task duration, failure cost, execution topology, and autonomy. See Composing Agent Patterns for the composition method.
A payroll allowance change across the lifecycle
- Register: Record the single-employee transport allowance capability, its region, employee types, mutable fields, and owner.
- Design: The Goal Contract binds the employee, current and target values, effective date, and non-goals. Large or batch changes require approval.
- Validate: Fixed cases cover valid changes, policy conflicts, departed employees, duplicate requests, and concurrent updates. Canary operation accepts only small, reversible changes.
- Operate: Approval binds the tool version, normalized parameters, and target resource. A read after write verifies the external payroll state.
- Revalidate: The next payroll cycle supplies the delayed outcome. Failures and manual corrections become regression cases.
- Evolve: Policy, tool schema, or owner changes invalidate previous release evidence. A new version is validated; versions tied to a retired API leave operation.
Common gaps
- A capability is live without a fixed owner or a revocable version record.
- Offline evaluation, shadow operation, and canary release are treated as the same test.
- Validation scores the model output but does not inspect tool side effects or consumer outcomes.
- Runtime events are not bound to prompt, tool-set, skill, model, and policy versions.
- Promotion exists, but demotion, freeze, rollback, and retirement do not.
Review checklist
- Does each production capability have a stable ID, version, owner, and business scope?
- Does release evidence cover both offline evaluation and controlled production validation?
- Can each run be traced to a capability version, tool set, and authority policy?
- Do external acceptance and delayed business outcomes enter revalidation?
- Which changes invalidate previous evidence and trigger a freeze or new validation?
- Can the system demote, roll back, revoke, and retire a capability?
Related material
- ADPS Pattern Catalogue and Selection Framework
- Composing Agent Patterns
- Human-Agent Interaction
- X1 Observability
- X2 Evaluation & Validation
- Governance overview
- First Governance Module Workshop
Suggested citation: ADPS, Agent Design Lifecycle: From Capability Registration to Evolution and Retirement, ADPS Topic Research, 2026-08-25.
This topic defines an engineering structure for lifecycle management. Stage gates, approvers, and evidence thresholds depend on business risk, regulation, and the operating environment.