Key takeaways
- An AI agent is software that pursues a goal and takes actions with tools, with some independence from a person. Every major definition shares those three parts.
- The definitions differ on how much independence counts. Autonomy is a setting you choose, not a property of the model.
- Grant authority per type of action, not per agent: reading data, advising, preparing a document and executing it are different risks.
- On realistic office tasks the best agents still finish only a minority of the work without help. Procedures and a human approval before money moves are what made them usable.
- Measure an agent the way you would measure a new process: against control stores that did not get it.
"AI agent" is the most used term in business software this year, and one of the least defined. Gartner estimates that only about 130 of the thousands of vendors selling agentic AI offer the real thing, and expects over 40% of agentic AI projects to be canceled by the end of 2027 over costs, unclear value or weak risk controls5.
Before deciding whether an agent belongs in your stores, it helps to know what the people who coined the term mean by it. Here are their definitions, quoted from their own documents.
Six definitions of an AI agent
| Who | How they define it | What makes it an agent |
|---|---|---|
| OpenAI | How they define it"Systems that independently accomplish tasks on your behalf." | What makes it an agentIt runs the workflow itself. A chatbot that only answers is not an agent. |
| Anthropic | How they define itSystems where language models "dynamically direct their own processes and tool usage". | What makes it an agentIt chooses its own steps. Steps fixed in code are a workflow. |
| How they define it"An application that attempts to achieve a goal by observing the world and acting upon it using the tools that it has at its disposal." | What makes it an agentA goal, plus tools that act on the world. | |
| Gartner | How they define it"Autonomous or semiautonomous software entities" that perceive, decide, act and achieve goals. | What makes it an agentSemi-autonomous counts too. |
| EU AI Act | How they define itNo definition of an agent. An AI system operates "with varying levels of autonomy". | What makes it an agentAutonomy is a scale, not a yes or no. |
| Feng, McDonald and Zhang | How they define itAutonomy is "a deliberate design decision, separate from its capability". | What makes it an agentHow much it may do is set by whoever deploys it. |
Read together, they agree on three parts: a goal, tools that act rather than only talk, and some independence from a person1, 2, 3, 4. The EU AI Act, the law that will regulate much of this in Europe, does not use the word agent at all; it regulates AI systems that operate with varying levels of autonomy6.
They differ on the third part, and that is the one that matters to a retailer. An agent that drafts a purchase order and one that sends it to the supplier can run on the same model. What separates them is how much they are allowed to do without asking, and researchers at the University of Washington argue that this is a choice the deployer makes, separate from what the model can do7.
Agent, chatbot, copilot or workflow?
A chatbot answers. A copilot answers from your data and suggests; the guide to AI copilots for retail operations covers what makes those answers trustworthy. A workflow runs steps someone fixed in advance, such as a nightly reorder rule. An agent decides the next step itself and uses tools to take it2. In practice most useful systems mix the last two: fixed rules do the arithmetic, and the model handles the parts that need judgement and explanation.
Where companies are with it: in McKinsey's 2026 survey, the share of organisations with more than $1 billion in revenue that scale AI agents in at least one function rose from 27% to 40% in a year, while smaller organisations stayed flat at 22%. Respondents in consumer goods and retail most often use agents in marketing and sales8.
Autonomy is a setting: grant it per action
Researchers describe the person's role as the agent's independence grows: operator, collaborator, consultant, approver, and finally observer, who can only switch it off7. OpenAI's own guide adds the practical rule: rate each tool by whether it only reads or also writes, whether the action can be reversed, and its financial impact, and keep a person in the loop for actions such as canceling orders, authorising large refunds or making payments1.
For a store chain that means one agent can hold different authority for different actions. It may read stock freely, advise on transfers, prepare purchase orders for approval, and still need a person before anything reaches a supplier. A ladder of five levels, granted per type of action, makes this explicit:
L4 Executes within limits
Not granted yet- The AI
- Acts inside a budget and rules without asking; anything outside goes back to L3.
- The person
- Reads the log and can reverse or pause.
L3 Executes after confirmation
- The AI
- After one approval the document reaches the ERP without retyping.
- The person
- Confirms each document.
L2 Prepares
- The AI
- Prepares the finished document: a draft order, a promotion plan, a task for a store.
- The person
- Approves it and enters it in the ERP.
L1 Advises
- The AI
- Proposes an action with the evidence behind it.
- The person
- Decides and does the work.
L0 Observes
- The AI
- Computes its proposals in the background and shows them to no one.
- The person
- Nothing yet; the proposals are compared with what people did.
What agents still get wrong
The case for limits is in the evidence. In TheAgentCompany, a benchmark of 175 tasks in a simulated company, the best agent tested in the paper finished 30.3% of them on its own9. When Anthropic let a model run a small office shop for about a month, it sold items below cost, handed out discount codes on request and told customers to pay into an account it had made up; its makers concluded they "would not hire" it10.
The second run is the more useful one. Procedures, cost visibility and a rule that a person checks every purchase removed most of the losses, and the team summed it up as "bureaucracy matters"11. That is a retail lesson: the controls a chain already applies to a new buyer, such as limits, approvals and a review after the first month, are what make an agent safe to use.
Six rules for AI agents in a store chain
- Let fixed rules compute quantities and money; let the model explain them and handle exceptions.
- Give each agent one measurable goal and the limits it may not buy that goal with, such as availability without inflating stock.
- Grant authority per type of action, and let only an owner raise it, after a probation with clear thresholds.
- Lower it automatically when a limit is breached or the data goes stale.
- Keep a stop button and a record of every action. For high-risk systems the EU AI Act requires that people can override or reverse the output and halt the system6.
- Measure the effect against control stores that did not get the agent's actions, not against last month.
The last rule is the one most often skipped. Shelf availability moves with the season for reasons that have nothing to do with software; only a comparison with similar stores in the same weeks separates the agent's effect from the season. The out-of-stocks guide shows how availability is read store by store.
Week 1Week 12
- Stores with the agent
- Control stores, advice only
How marql's AI employees apply this
marql calls its agents AI employees: six roles, from supply to finance, each with one KPI and limits it may not break. Authority uses the five levels above, set per type of action. Only the owner or COO raises a level, after a probation the product checks every day: to move from advising to preparing, four weeks at the level and at least 70% of its advice accepted by people; to execute after confirmation, a passed exam on a retail simulator and no more than 10% of draft lines changed by people. The top level is closed for every customer.
Quantities come from fixed rules; the language model explains them. The level an employee actually works at is the lowest of what was granted, what the ERP connection allows and whether the data is fresh: with e:corg, the ERP creates the document itself; with other ERPs a person enters the approved draft. Every employee can be paused, and it drops a level by itself when its limit is breached.
Store orders through e:corg
Store orders through another ERP
The same employee, the same level granted
In a fifth of the stores each employee only advises, so its KPI can be compared with stores where it does not act; a chain with fewer than five stores sees the KPI as an observation, not an effect. The screen itself says it plainly: a completed action is not yet a measured benefit. The AI supply employee comes first, because fixing demand lost to an empty shelf is where the most is ready.
Sources
- OpenAI (2025). A practical guide to building agents. PDF
- Schluntz, E. and Zhang, B. (2024-12-19). Building effective agents. Anthropic. anthropic.com
- Wiesinger, J., Marlow, P. and Vuskovic, V. (2024). Agents. Google whitepaper. kaggle.com
- Gartner (2025-08-05). Gartner Hype Cycle identifies top AI innovations in 2025. Press release. gartner.com
- Gartner (2025-06-25). Gartner predicts over 40% of agentic AI projects will be canceled by end of 2027. Press release. gartner.com
- Regulation (EU) 2024/1689 (Artificial Intelligence Act), Articles 3(1) and 14, as amended by Regulation (EU) 2026/1744. eur-lex.europa.eu
- Feng, K. J. K., McDonald, D. W. and Zhang, A. X. (2025). Levels of autonomy for AI agents. arXiv:2506.12469. arxiv.org
- McKinsey & Company (2026-08-25). The state of AI in 2026: on the road to ROI. mckinsey.com
- Xu, F. F. et al. (2025). TheAgentCompany: benchmarking LLM agents on consequential real world tasks. arXiv:2412.14161. arxiv.org
- Anthropic (2025-06-27). Project Vend: can Claude run a small shop? anthropic.com
- Anthropic (2025-12-18). Project Vend: phase two. anthropic.com
TopicsAI agents, Agentic AI, AI employees, Retail operations