This prompt is designed for the specific moment in an agent orchestration layer when a task is in-flight and a decision must be made: continue processing, or escalate to a human or fallback system. It is not a simple timeout check. The core job-to-be-done is to force the model to reason about the remaining SLA time budget, the probability of a breach, and the cost of delay before making a routing decision. The ideal user is a platform operator or reliability engineer embedding this prompt into an agent harness that must enforce contractual time commitments and avoid silent SLA violations. You should use this when your system has a defined SLA (e.g., 5 minutes, 1 hour) and the current task's progress and latency are measurable.
Prompt
Escalation Decision with SLA Compliance Check Prompt

When to Use This Prompt
A practical guide for platform operators and reliability engineers who need an agent to make SLA-aware escalation decisions based on real-time time-budget analysis.
To use this effectively, you must provide the prompt with real-time operational data. This includes the task's start time, the current time, the SLA deadline, the estimated time to completion, and the cost of a breach. The prompt template is designed to ingest these variables and output a structured decision. A concrete implementation would involve an upstream process that calculates the [REMAINING_TIME_BUDGET] and [BREACH_PROBABILITY] before injecting them into the prompt. The model's job is not to calculate these values but to reason about the trade-offs they represent. For example, a task with a 95% breach probability and a high breach cost should almost always trigger an immediate escalation, while a task with a 10% breach probability and a low cost might warrant continued processing with a follow-up check.
Do not use this prompt for simple, static timeout-based routing where the decision is a binary if elapsed_time > timeout then escalate. That logic belongs in application code, not an LLM call. This prompt is for scenarios where the decision is non-obvious and requires weighing the risk of a breach against the cost and disruption of an escalation. It is also unsuitable for tasks where SLA compliance is not a primary concern. The next step after implementing this prompt is to wire its structured output into your orchestration logic, ensuring that an escalate decision triggers the correct handoff workflow and that the decision itself is logged for auditability. Avoid using this prompt without a validation layer that checks the output schema and logs the decision context for future SLA compliance reporting.
Use Case Fit
Where the Escalation Decision with SLA Compliance Check Prompt works and where it introduces risk. This prompt is designed for production agent systems that must respect time and budget constraints, not for open-ended conversational agents.
Good Fit: SLA-Bound Agent Pipelines
Use when: An autonomous agent is operating under a strict SLA with measurable time or budget constraints. The prompt excels at comparing remaining SLA budget against estimated completion time to prevent silent breaches. Guardrail: Ensure the SLA definition and remaining budget are passed as structured data, not inferred from conversation history.
Bad Fit: Open-Ended Chat
Avoid when: The system has no defined SLA, or the user is engaged in a free-form chat without a measurable completion deadline. Applying SLA logic here generates unnecessary, confusing escalations. Guardrail: Gate this prompt behind a check for an active SLA context; if no SLA exists, route to a standard escalation prompt.
Required Inputs
Risk: Incomplete inputs cause the model to hallucinate SLA status or breach risk, leading to incorrect preemptive escalations. Guardrail: Validate the presence and format of [SLA_DEFINITION], [REMAINING_BUDGET_MS], [ESTIMATED_COMPLETION_MS], and [CURRENT_TASK] before invoking the prompt. Reject the request if any field is null.
Operational Risk: Time Drift
Risk: The [ESTIMATED_COMPLETION_MS] is a point-in-time guess. If the agent runs longer than expected, the initial escalation decision may become invalid, causing a false sense of security. Guardrail: Re-evaluate the escalation decision on a fixed heartbeat or after every tool call. Use a circuit breaker that triggers if the actual elapsed time exceeds the initial estimate by a configurable margin.
Operational Risk: Premature Escalation
Risk: A conservative model might escalate too early, flooding a human review queue with tasks the agent could have completed within the SLA. This undermines the automation's value. Guardrail: Implement a cooldown or hysteresis threshold. The prompt should only escalate if the breach probability exceeds a high-confidence threshold (e.g., >90%), not just when the estimate is close to the budget.
Operational Risk: Silent Budget Exhaustion
Risk: The agent fails to escalate because the SLA check logic is bypassed or the budget data is stale, leading to a direct SLA breach with no audit trail. Guardrail: Log every SLA evaluation, including the decision not to escalate, as a structured audit event. This proves due diligence even when the agent proceeds autonomously.
Copy-Ready Prompt Template
A ready-to-adapt system prompt for making SLA-aware escalation decisions with structured output and audit-ready rationale.
This prompt template is designed to be pasted directly into your agent's system instructions or an escalation decision node. It forces the model to consider current SLA status, remaining time or budget, and breach risk before recommending an action. The output is a structured JSON object that your orchestration layer can parse to route the task to a human, a fallback agent, or a specialized queue. Every square-bracket placeholder must be replaced with live data from your SLA monitoring system before each invocation.
textYou are an escalation decision engine for an autonomous agent platform. Your job is to evaluate whether the current agent should continue working on a task or escalate it based on SLA compliance risk. ## INPUT DATA - Current Task: [TASK_DESCRIPTION] - Agent Capability Assessment: [CAPABILITY_GAP_REPORT] - SLA Target: [SLA_TARGET_IN_SECONDS] - Elapsed Time: [ELAPSED_TIME_IN_SECONDS] - Remaining Budget: [REMAINING_BUDGET_PERCENT] - Breach Risk Score: [BREACH_RISK_SCORE_0_TO_1] - Policy Rules: [APPLICABLE_POLICY_CLAUSES] ## DECISION RULES 1. If Breach Risk Score > 0.8, escalate immediately regardless of other factors. 2. If Elapsed Time exceeds 80% of SLA Target and the agent has not produced a verifiable partial result, escalate to a human reviewer. 3. If Remaining Budget < 10% and the task is not on a critical path, escalate to a lower-cost fallback agent. 4. If the Capability Gap Report indicates the agent cannot complete the task with confidence > 0.7, escalate to the specialized agent or human queue specified in the report. 5. Otherwise, allow the agent to continue. ## OUTPUT SCHEMA Return a single JSON object with this exact structure: { "decision": "continue" | "escalate", "escalation_target": "human_review" | "fallback_agent" | "specialized_agent" | null, "reason_code": "BREACH_RISK" | "TIME_EXCEEDED" | "BUDGET_EXHAUSTED" | "CAPABILITY_GAP" | "POLICY_TRIGGER" | "NONE", "rationale": "A concise explanation citing the specific SLA metric, policy clause, or capability gap that drove the decision.", "breach_risk_at_decision": [BREACH_RISK_SCORE_0_TO_1], "context_for_target": "A structured summary of what the next agent or human needs to know to resume the task without rework." } ## CONSTRAINTS - Do not invent SLA metrics. Use only the values provided in the input data. - If multiple escalation conditions are met, select the one with the highest severity (Breach Risk > Time Exceeded > Budget Exhausted > Capability Gap). - The rationale must reference at least one specific input value. - If the decision is "continue", escalation_target must be null and reason_code must be "NONE".
Before deploying this prompt, validate that your SLA monitoring system can supply every placeholder with accurate, real-time values. Stale or missing data will cause the model to either refuse the task or produce a decision based on incorrect assumptions. For high-risk production environments, add a post-processing step that verifies the output JSON against the schema and logs every escalation decision with the full input context for auditability. If the model returns a decision that contradicts the hard rules (e.g., continuing when Breach Risk Score > 0.8), your harness should reject the output and retry or fall back to a deterministic rule engine.
Prompt Variables
Resolve every placeholder before the model call. Missing or malformed variables will cause incorrect SLA calculations, premature escalations, or missed breach warnings.
| Placeholder | Purpose | Example | Validation Notes |
|---|---|---|---|
[TICKET_CONTEXT] | Full incident or request details including creation time, severity, and current status | Incident #INC-421: Payment API p99 latency at 3400ms. Created 2025-03-18T09:12:00Z. Severity: P2. Status: In Progress. | Must contain a creation timestamp parseable as ISO-8601. Null or missing timestamp forces immediate escalation to human review. |
[SLA_POLICY] | The specific SLA contract terms including response time, resolution time, and severity tiers | P2 incidents: 15min response, 4hr resolution. Business hours only (08:00-20:00 UTC). Excludes planned maintenance windows. | Must define at least one measurable time boundary. If policy is ambiguous or missing numeric thresholds, the prompt must return an SLA_UNDEFINED flag. |
[CURRENT_AGENT_CAPABILITIES] | List of actions and decisions the current agent is authorized to perform | Can restart service pods, check logs, page on-call. Cannot modify DNS, roll back database, or approve production config changes. | Must be an explicit allowlist. An empty list or wildcard entry triggers a capability-gap escalation. Validate against a known capability registry if available. |
[ESCALATION_TARGETS] | Available escalation paths with roles, response times, and contact methods | SRE Lead: 5min ack via PagerDuty. DBRE Team: 15min ack via Slack #db-incidents. Incident Commander: manual page only. | Each target must have a contact method and expected acknowledgment time. Missing contact method for the selected target forces fallback to the next available path. |
[REMAINING_BUDGET_SECONDS] | Seconds remaining before the SLA resolution deadline is breached | 8400 | Must be a non-negative integer. If null or negative, treat as breach-imminent and escalate immediately. Validate against [TICKET_CONTEXT] creation time and [SLA_POLICY] resolution window. |
[AGENT_ACTION_LOG] | Chronological record of actions the current agent has already taken | [09:14] Restarted payment-api pod-3. [09:16] Confirmed pod healthy, latency unchanged. [09:18] Checked upstream DB connection pool: normal. | Must be a time-ordered list. If empty, the agent has not attempted remediation. If the log shows repeated failed actions, the prompt should increase escalation urgency. |
[BREACH_RISK_THRESHOLD] | Percentage of SLA budget consumed that triggers an escalation recommendation | 80 | Must be an integer between 1 and 100. If missing, default to 75. If set to 100, the prompt will only escalate after breach, which may violate proactive SLA commitments. |
[HUMAN_REVIEW_REQUIRED] | Boolean flag forcing human-in-the-loop regardless of confidence or budget | Must be true or false. If true, the prompt must bypass all automated routing and produce a human handoff packet. Validate that downstream orchestration respects this flag. |
Implementation Harness Notes
Wire this prompt into your agent orchestration layer as a pre-action gate with validation, retries, and audit logging.
This prompt functions as a pre-action gate within an agent orchestration layer. It must be invoked before the agent executes each major step or whenever a step exceeds its expected duration. The primary integration point is a decision node in your agent graph that calls the LLM with this prompt, parses the structured decision field from the response, and routes execution accordingly. The harness is responsible for enforcing the SLA budget check, not the prompt itself. The prompt provides the decision logic; the harness enforces the hard constraints.
On receiving the output, parse the top-level decision field. If the value is escalate, immediately route the full context payload to the specified escalation_target and log the reason_code. If the value is continue, update the agent's remaining SLA budget in your state store and allow the agent to proceed to its next action. Always log the full decision payload—including sla_budget_remaining, breach_risk, and reason_code—to your immutable audit store. This log is your primary artifact for SLA compliance reporting and post-incident review. Implement a retry wrapper around the model call with exponential backoff (e.g., 1s, 2s, 4s), but include a critical guard: do not retry if the remaining SLA budget is below 10 percent of the target. In that low-budget scenario, bypass the model call entirely and force-escalate to the fastest available human path, logging the forced escalation with reason code SLA_BUDGET_EXHAUSTED.
For model choice, prefer a fast, instruction-following model (e.g., GPT-4o, Claude 3.5 Sonnet) with low latency, as this prompt sits on the critical path of agent execution. Set temperature=0 to ensure deterministic escalation decisions. Validate the output against a strict JSON schema before acting on the decision field; if parsing fails, treat it as an escalate decision with reason code PARSE_FAILURE. In high-risk domains, add a human approval step for any continue decision when breach_risk is high. Do not use this prompt for trivial steps where SLA budget is irrelevant—reserve it for state-changing operations, external API calls, or user-facing actions where an SLA miss carries business impact.
Expected Output Contract
Defines the required fields, types, and validation rules for the escalation decision payload. Use this contract to parse and validate the model response before routing or logging.
| Field or Element | Type or Format | Required | Validation Rule |
|---|---|---|---|
escalation_decision | enum: escalate | do_not_escalate | human_review | Must match one of the three allowed values exactly. | |
target_agent | string | null | Required if decision is escalate; must match a registered agent ID from [AGENT_REGISTRY]; null otherwise. | |
sla_status | object | Must contain current_budget_remaining (number) and breach_risk (enum: none | warning | critical). | |
sla_status.breach_risk | enum: none | warning | critical | Must be derived from comparing remaining budget against [SLA_THRESHOLD]. | |
rationale_summary | string | Must be 1-3 sentences citing the primary trigger (confidence, SLA, capability gap, or policy). | |
confidence_score | number | Must be a float between 0.0 and 1.0; parse check required. | |
policy_triggers | array of strings | If present, each string must match a policy ID from [POLICY_CATALOG]; null allowed. | |
handoff_payload | object | null | Required if decision is escalate; must contain task_summary (string) and pending_decisions (array); null otherwise. |
Common Failure Modes
What breaks first when agents make SLA-aware escalation decisions and how to guard against it.
SLA Status Staleness
What to watch: The agent escalates based on an SLA status that was cached or retrieved minutes ago, missing a recent breach or resolution. This causes unnecessary handoffs or missed deadlines. Guardrail: Require a fresh SLA status fetch within a strict time-to-live (TTL) before the escalation prompt runs. Include the last_checked_timestamp in the prompt context so the model can weigh data freshness.
Budget Exhaustion Miscalculation
What to watch: The model misinterprets remaining budget units (e.g., minutes vs. percentage) or fails to account for in-flight work that hasn't been deducted yet, leading to premature or delayed escalation. Guardrail: Normalize all budget values to a single unit in the application layer before injection. Add a budget_remaining_absolute field and explicitly instruct the model to treat any non-zero value as available capacity unless a budget_exhausted boolean flag is true.
Breach Risk Over-Prioritization
What to watch: The model escalates every task that has any non-zero breach probability, flooding human operators with low-risk warnings and causing alert fatigue. Guardrail: Implement a two-threshold system in the prompt: a soft threshold for internal monitoring and a hard threshold for human escalation. Instruct the model to only escalate when breach_probability > hard_threshold and to log soft breaches without interrupting the workflow.
Ignoring Escalation Policy Overrides
What to watch: A blanket policy (e.g., "all P1 incidents skip SLA check and escalate immediately") is present in the system prompt but the model still performs a full SLA analysis, delaying critical handoffs. Guardrail: Structure the prompt with a pre-check step. Instruct the model to evaluate escalation_policy_overrides first and short-circuit the SLA analysis if any override condition matches. Validate this with a test case where an override is present.
Vague Escalation Target
What to watch: The model correctly decides to escalate but routes to a generic "on-call" or "Tier 2" queue without specifying the required skill, team, or agent ID, causing a second triage step downstream. Guardrail: Require the output schema to include a target_agent_id or target_queue_slug from a closed list of available escalation targets provided in the prompt. Add a validator that rejects any output where the target is not in the allowed list.
Context Loss During Handoff
What to watch: The escalation decision is made correctly, but the handoff payload to the next agent or human is missing critical SLA context (e.g., time remaining, breach consequences), forcing the receiver to re-evaluate from scratch. Guardrail: Define a mandatory handoff_context object in the output schema that must include sla_deadline_iso, budget_remaining, and breach_impact_summary. Test that downstream agents can resume work without re-querying the SLA system.
Evaluation Rubric
Run these checks against a golden dataset of 50+ SLA scenarios to validate escalation decision quality before deployment. Each criterion targets a specific failure mode observed in SLA-aware routing.
| Criterion | Pass Standard | Failure Signal | Test Method |
|---|---|---|---|
SLA Breach Detection | Correctly identifies scenarios where SLA is already breached vs. at risk vs. compliant | Misclassifies a breached SLA as compliant or fails to flag an imminent breach within the warning window | Run against 20 golden scenarios with known SLA states; require >=95% accuracy on breach classification |
Remaining Budget Accuracy | Reports remaining SLA budget within ±5% of ground truth when budget data is provided in [SLA_CONTEXT] | Budget calculation off by >10% or uses wrong budget pool when multiple SLAs apply | Parse output [remaining_budget] field; compare to pre-computed ground truth for each test case |
Escalation Routing Correctness | Routes to correct escalation target as defined in [ESCALATION_POLICY] for each SLA severity tier | Routes critical breach to wrong team, skips required approval step, or escalates when self-resolution is still viable | Compare [escalation_target] output to expected routing table; require 100% match on critical severity cases |
Breach Risk Time Horizon | Correctly categorizes risk as immediate (<15min), near-term (<2hrs), or monitoring-only (>2hrs) based on burn rate | Flags a slow-burn SLA as immediate risk or misses a rapid-burn breach within the detection window | Time-bucket classification test: 30 scenarios with varying burn rates; require >=90% bucket accuracy |
Policy Citation Compliance | Every escalation decision cites the specific SLA clause or policy rule that triggered it from [POLICY_DOCUMENT] | Escalation without citation, citation to non-existent policy clause, or generic rationale without policy grounding | Regex check for citation format; manual review of 10 random outputs for citation accuracy against source policy |
Confidence Score Calibration | Reported confidence score correlates with actual decision correctness; low confidence (<0.7) triggers human review flag | High confidence (>0.9) on incorrect escalations or low confidence on straightforward compliant scenarios | Brier score or ECE calibration metric on 100 test cases; require ECE <0.1 for production acceptance |
Multi-SLA Conflict Resolution | When multiple SLAs conflict, selects the most restrictive requirement and documents the override rationale | Averages SLA thresholds, ignores the stricter SLA, or escalates without identifying which SLA drives the decision | 10 multi-SLA conflict scenarios; require correct strictest-SLA selection in >=9 cases with documented rationale |
Enabling Efficiency, Speed & Accuracy
Intelligent Analysis, Decision & Execution
We build AI systems for teams that need search across company data, workflow automation across tools, or AI features inside products and internal software.
Talk to Us
Search across company data
Give teams answers from docs, tickets, runbooks, and product data with sources and permissions.
Useful when people spend too long searching or get different answers from different systems.

Automate internal workflows
Use AI to route work, draft outputs, trigger actions, and keep approvals and logs in place.
Useful when repetitive work moves across multiple tools and teams.

Add AI to products and internal tools
Build assistants, guided actions, or decision support into the software your team or customers already use.
Useful when AI needs to be part of the product, not a separate tool.
Adapt This Prompt
How to adapt
Use the base prompt with a frontier model (GPT-4o, Claude 3.5 Sonnet) and minimal validation. Focus on getting the SLA logic and escalation decision structure right before adding production harness code. Replace [SLA_POLICY] with a simple text block describing thresholds. Use [CURRENT_TICKET] as a free-text field.
Watch for
- The model may invent SLA breach times if [CURRENT_TIMESTAMP] is not explicitly provided.
- Without schema enforcement, the output may drift from the required JSON structure on retries.
- Overly broad instructions may cause the model to escalate every ticket when unsure.

About the author
Prasad Kumkar
CEO & MD, Inference Systems
Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.
His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.
Partnered with leading AI, data, and software stack.
How We Work
Custom AI workflows for your Business
One-fit-all AI don't work for modern businesses. At Inferensys, we aim to understand your business & custom requirements; which we use to define most efficient agentic workflows, the data, and the tools for your business.
01
Review the use case
We understand the task, the users, and where AI can actually help.
Read more02
Pick the right approach
We define what needs search, automation, or product integration.
Read more03
Build the first useful version
We implement the part that proves the value first.
Read more04
Improve from there
We add the checks and visibility needed to keep it useful.
Read moreThe first call is a practical review of your use case and the right next step.
Talk to Us