Inferensys

Prompt

Agent Handoff with Suggested Actions Prompt

A practical prompt playbook for using Agent Handoff with Suggested Actions Prompt in production AI workflows.
Engineer reviewing agent handoff workflow on laptop, task routing diagrams visible, technical office setup.
PROMPT PLAYBOOK

When to Use This Prompt

Defines the precise job-to-be-done for the Agent Handoff with Suggested Actions Prompt, its ideal user, required context, and clear boundaries for when it should not be used.

This prompt is a decision-support tool for agent workflows that reach an action boundary. It is designed for situations where an AI agent has analyzed a situation, identified a set of possible next steps, but is explicitly prohibited from executing them due to policy, risk, or system design. The primary job-to-be-done is to transform raw agent analysis into a structured, actionable choice for a human operator. The ideal user is a developer or AI engineer building a semi-autonomous agent system, such as a customer support copilot, a code-review bot, or a compliance monitoring agent, where the final decision must rest with a human reviewer. The prompt requires rich context: the agent's full analysis, the proposed actions, the constraints that prevent autonomous execution, and the specific decision the human needs to make.

Use this prompt when your agent has completed its analytical work and must hand off control. For example, a code-review agent might identify a security vulnerability and propose three remediation paths, but a senior engineer must choose the correct one based on broader system context. A compliance agent might flag several transactions and suggest blocking, reviewing, or escalating each, but a human analyst must make the final call. The prompt structures this handoff by forcing the agent to rank its suggestions, provide a clear rationale for each, and package the necessary evidence. This is not a generic summary prompt; it is a structured interface between agent capability and human authority. It should not be used for simple status updates, logging, or when the agent is authorized to act autonomously. If the agent can execute the action itself, use a direct tool-calling or execution prompt instead.

Before implementing this prompt, ensure you have defined a clear action boundary in your agent's system prompt. The agent must know it is a recommender, not an executor. The harness should validate that the output contains a ranked list, explicit rationales, and all context a human needs to decide without re-analyzing raw data. Common failure modes include the agent providing unranked lists, omitting the rationale, or failing to include the specific decision the human must make. In high-risk domains like finance or healthcare, the harness must also log the handoff for audit trails and require explicit human acknowledgment before any downstream system acts on the decision. If the human's choice will be fed back into the agent system, design a separate prompt to ingest that decision and continue the workflow.

PRACTICAL GUARDRAILS

Use Case Fit

Where the Agent Handoff with Suggested Actions prompt works and where it introduces risk. Use these cards to decide if this pattern fits your workflow before you integrate it into a production harness.

01

Good Fit: Human Decision Required

Use when: The agent has identified multiple viable next steps but lacks authority to execute any of them. The prompt structures ranked options with rationale so a human can choose quickly. Guardrail: Ensure the agent's action space is explicitly bounded in system instructions so it never attempts execution.

02

Bad Fit: Fully Autonomous Workflows

Avoid when: The system is designed for end-to-end automation without human review. Adding suggested actions creates an unnecessary blocking step. Guardrail: Route to this prompt only when a confidence threshold or policy rule triggers escalation; otherwise, let the agent execute directly.

03

Required Inputs

What you need: The agent's current task context, its completed actions, the candidate next steps it generated, and the evidence or reasoning behind each candidate. Guardrail: Validate that every suggested action includes a source trace or reasoning chain before the handoff is presented to a human.

04

Operational Risk: Option Overload

What to watch: The agent proposes too many suggested actions, overwhelming the human reviewer and slowing decision velocity. Guardrail: Cap the number of suggested actions at 3-5 and require the agent to rank them by confidence or impact. Add a post-processing step that truncates low-confidence options.

05

Operational Risk: Rationale Hallucination

What to watch: The agent fabricates plausible-sounding but incorrect rationale for a suggested action, leading the human to make a misinformed choice. Guardrail: Require every rationale to cite specific evidence from the agent's working memory or tool outputs. Run an eval that checks rationale-evidence alignment before the handoff is surfaced.

06

Operational Risk: Stale Context in Handoff

What to watch: The handoff captures agent state at a point in time, but the underlying situation changes before the human reviews it, making suggested actions irrelevant or harmful. Guardrail: Include a context freshness timestamp and re-validate suggested actions against current state when the human opens the review. Auto-expire handoffs older than a configured TTL.

PROMPT PLAYBOOK

Copy-Ready Prompt Template

A ready-to-use prompt that structures an agent-to-human handoff with ranked suggested actions, rationale, and decision-ready context.

This prompt template is designed to be pasted directly into your agent's handoff instruction block. It forces the agent to produce a structured handoff payload containing a ranked list of suggested actions, the rationale behind each, and the evidence a human reviewer needs to choose among them. The agent must not execute any of the suggested actions—it only proposes them. Replace every square-bracket placeholder with values from your runtime context before the agent processes the handoff.

text
You are an agent that has completed analysis but lacks authority to execute the next steps. Your task is to produce a structured handoff for a human reviewer. Do not take any action beyond producing this handoff.

## Context
- Task: [TASK_DESCRIPTION]
- Agent Actions Taken: [ACTIONS_ALREADY_PERFORMED]
- Constraints: [CONSTRAINTS]
- Risk Level: [RISK_LEVEL]

## Output Schema
Return a JSON object with the following structure:
{
  "handoff_summary": "A 2-3 sentence summary of what the agent did and why a human decision is needed.",
  "suggested_actions": [
    {
      "rank": 1,
      "action": "Clear, imperative description of the proposed action.",
      "rationale": "Why this action is proposed, including trade-offs considered.",
      "evidence": ["Source or observation that supports this action."],
      "risk_if_taken": "What could go wrong if this action is executed.",
      "risk_if_not_taken": "What could go wrong if this action is skipped."
    }
  ],
  "decision_deadline": "ISO 8601 timestamp or 'none' if no deadline.",
  "questions_for_human": ["Specific questions the human must answer to make a decision."]
}

## Rules
1. Rank suggested actions by urgency and impact, with rank 1 being the strongest recommendation.
2. Every suggested action must include at least one piece of supporting evidence.
3. If you are uncertain about any field, mark it with a confidence note: "[LOW CONFIDENCE] reason."
4. Do not fabricate evidence. If evidence is missing, state "No direct evidence available."
5. If the risk level is [HIGH] or [CRITICAL], include an explicit warning in the handoff_summary.
6. Limit suggested actions to a maximum of [MAX_ACTIONS] items.

After pasting this template, wire the output into your human review queue. Validate that the JSON conforms to the schema before presenting it to a reviewer. For high-risk workflows, log every handoff payload with a timestamp and reviewer identity for audit trails. If the agent produces malformed JSON, retry once with a repair prompt; if it fails again, escalate the raw agent output to a human operator with a note that the handoff structure is broken.

IMPLEMENTATION TABLE

Prompt Variables

Required and optional inputs for the Agent Handoff with Suggested Actions prompt. Validate these before assembly to prevent runtime failures or incomplete handoffs.

PlaceholderPurposeExampleValidation Notes

[AGENT_ROLE]

Describes the agent's function and authority boundary so the model understands what it can propose versus execute.

Customer Support Triage Agent

Must be a non-empty string. Should not imply execution authority the agent lacks. Check for role drift against system prompt.

[TASK_CONTEXT]

The full context of the task the agent was working on, including user intent, prior steps taken, and current state.

User requested refund for order #12345. Agent verified order status and checked refund policy.

Must include at least user intent and agent actions taken. Null or empty triggers assembly abort. Validate length under context budget.

[CANDIDATE_ACTIONS]

A list of possible next actions the agent identified, each with a label, description, and rationale.

[{"action":"Approve refund","rationale":"Order is within 30-day window"},{"action":"Escalate to billing","rationale":"Payment gateway error suspected"}]

Must be a valid JSON array with at least 1 item. Each item requires 'action' and 'rationale' string fields. Schema check before prompt assembly.

[RANKING_CRITERIA]

The criteria used to rank suggested actions, such as policy compliance, user impact, or cost.

Rank by: 1) Policy compliance confidence, 2) Customer effort reduction, 3) Financial impact

Must be a non-empty string or ordered list. Vague criteria like 'best option' should be rejected. Validate for actionable dimensions.

[EVIDENCE_PACKAGE]

Supporting evidence for each candidate action, including source excerpts, timestamps, and retrieval metadata.

Refund policy v2.3 section 4.1: 'Full refund within 30 days of delivery.' Order delivered 2025-01-10.

Each action in [CANDIDATE_ACTIONS] should have at least one evidence reference. Null allowed if agent had no retrieval step. Validate citation traceability.

[CONFIDENCE_THRESHOLD]

The minimum confidence score an action must have to be included in the handoff. Actions below this threshold are filtered.

0.7

Must be a float between 0.0 and 1.0. Default to 0.5 if not provided. Validate type before filtering logic.

[OUTPUT_SCHEMA]

The expected JSON schema for the handoff output, defining fields for actions, rankings, evidence, and decision request.

{"handoff_summary":"string","ranked_actions":[{"rank":"int","action":"string","rationale":"string","evidence":["string"],"confidence":"float"}],"decision_required":"string"}

Must be a valid JSON Schema object. Validate parse before prompt assembly. Reject schemas missing 'ranked_actions' or 'decision_required' fields.

[HUMAN_REVIEWER_CONTEXT]

Additional context the human reviewer needs, such as SLA deadlines, prior reviewer notes, or escalation history.

SLA: Respond within 4 hours. Previous reviewer note: 'Customer has escalated twice before.'

Optional. If provided, must be a non-empty string. Null allowed. Validate for PII before inclusion in prompt.

PROMPT PLAYBOOK

Implementation Harness Notes

How to wire the Agent Handoff with Suggested Actions prompt into a production application with validation, logging, and human review gates.

The Agent Handoff with Suggested Actions prompt is designed to sit at the boundary between an autonomous agent and a human reviewer. In a typical implementation, the agent reaches a decision point where it has identified candidate next steps but lacks the authority to execute them. The harness calls this prompt with the agent's current state, context, and analysis, and the model returns a structured handoff payload containing ranked suggested actions, rationale for each, and the information a human needs to choose among them. This payload is then surfaced in a review queue, dashboard, or notification system where a human operator can review and select an action.

The implementation harness must enforce a strict output schema. Define a JSON schema that includes: a handoff_summary string, a suggested_actions array where each item has an action_id, rank (integer), title, description, rationale, risks (array of strings), expected_outcome, and required_inputs (array of field names the human must provide if this action is selected), and a context_for_reviewer object containing agent_identity, task_id, confidence_scores per action, and evidence_references linking claims to source data. Validate the model's output against this schema before presenting it to the human. If validation fails, retry once with the schema error included in the prompt. If the retry also fails, log the failure and escalate the raw agent state to a human operator with a note that structured handoff generation failed.

Model choice matters here. Use a model with strong instruction-following and structured output capabilities. For high-stakes workflows, prefer models that support constrained decoding or JSON mode to reduce schema drift. Implement a review audit trail that captures: the agent state at handoff time, the full prompt sent, the raw model response, the validated structured output, the human's selected action, and the timestamp of selection. This audit trail is critical for governance, debugging handoff quality, and improving the prompt over time. Do not allow the agent to proceed with any suggested action until the human explicitly selects one through the review interface. The harness should treat the handoff as a blocking gate, not a notification that can be ignored.

Common failure modes to guard against: the model may suggest actions that are too vague to be actionable, rank actions without clear differentiation, omit critical risks, or hallucinate evidence references. Implement eval checks that run on a sample of handoff outputs before deployment. Each eval should verify that every suggested action includes a concrete next step a human can take, that the rationale is grounded in the provided context, that risks are specific to the action rather than generic disclaimers, and that evidence references point to actual source spans when source material is provided. Track false-positive escalations where the agent could have safely proceeded and false negatives where the agent failed to escalate a genuinely ambiguous or risky situation. Use these metrics to tune confidence thresholds and improve the prompt's escalation criteria.

IMPLEMENTATION TABLE

Expected Output Contract

Fields, types, and validation rules for the agent handoff payload. Use this contract to build a parser, validator, and retry guard before wiring the prompt into a production harness.

Field or ElementType or FormatRequiredValidation Rule

handoff_id

string (UUID v4)

Must parse as valid UUID v4. Reject on mismatch.

handoff_reason

enum string

Must match one of: [AWAITING_APPROVAL, AMBIGUOUS_INTENT, CAPABILITY_GAP, CONFIDENCE_BELOW_THRESHOLD, POLICY_BLOCK, ERROR_EXHAUSTED]. Reject unknown values.

task_summary

string (<=300 chars)

Length must be between 20 and 300 characters. Must not be identical to raw agent log. Reject if empty or truncated mid-sentence.

suggested_actions

array of objects

Array length must be between 1 and 5. Each object must pass the suggested_action schema check below.

suggested_actions[].rank

integer

Must be a positive integer starting at 1. Ranks must be sequential and unique within the array. Reject duplicates or gaps.

suggested_actions[].action_label

string (<=120 chars)

Must be a verb-led imperative phrase. Reject if empty, passive, or exceeds 120 characters.

suggested_actions[].rationale

string (<=500 chars)

Must reference at least one piece of evidence or constraint from the task context. Reject if purely speculative without grounding.

suggested_actions[].risk_level

enum string

Must match one of: [LOW, MEDIUM, HIGH, CRITICAL]. Reject unknown values.

suggested_actions[].preconditions_met

boolean

Must be true or false. If true, the action is ready to execute upon approval. If false, the human must resolve preconditions first.

suggested_actions[].preconditions_detail

string or null

Required when preconditions_met is false. Must describe what is missing. Null allowed only when preconditions_met is true.

evidence_package

object

Must contain at least one evidence item. Each item must have a source_reference and excerpt. Reject empty evidence_package.

evidence_package.items[].source_reference

string

Must be a retrievable identifier (URI, document ID, or log entry ID). Reject if unverifiable placeholder.

evidence_package.items[].excerpt

string (<=1000 chars)

Must be a direct quote or close paraphrase from the referenced source. Reject if excerpt cannot be matched to source via substring or embedding check.

confidence_score

number (0.0-1.0)

Must be a float between 0.0 and 1.0 inclusive. Reject if missing or outside range. Scores below [CONFIDENCE_THRESHOLD] should trigger escalation review.

escalation_urgency

enum string

Must match one of: [ROUTINE, PRIORITY, CRITICAL]. Reject unknown values. CRITICAL must correlate with risk_level CRITICAL in at least one suggested action.

human_decision_prompt

string (<=200 chars)

Must end with a question mark. Must ask the human to choose among the suggested actions or request more information. Reject if declarative or open-ended without a clear decision ask.

PRACTICAL GUARDRAILS

Common Failure Modes

Agent handoff with suggested actions fails in predictable ways. These are the most common failure modes in production and how to guard against them before they reach a human reviewer.

01

Vague or Unactionable Suggestions

What to watch: The agent proposes actions like 'review the data' or 'consider next steps' without specifying what to review or what the concrete options are. The human reviewer receives a handoff that requires them to reconstruct the problem from scratch. Guardrail: Require every suggested action to include a specific verb, target object, and expected outcome. Validate actionability in eval by checking whether a domain expert can execute the action without asking follow-up questions.

02

Missing Decision Context

What to watch: The handoff presents ranked actions but omits the evidence, constraints, or trade-offs that led to those rankings. The human sees what the agent recommends but not why, forcing blind approval or time-consuming context reconstruction. Guardrail: Enforce a structured handoff schema that requires rationale, key evidence, and rejected alternatives for each suggested action. Test by removing the rationale field and verifying the eval catches the gap.

03

Over-Confident Ranking Without Uncertainty Signals

What to watch: The agent presents a crisp ranked list with no indication of confidence, ambiguity, or closeness between options. A human may approve the top-ranked action without realizing the second option was nearly identical in expected value. Guardrail: Include a confidence score or qualitative uncertainty label per action. When scores are within a configurable threshold, flag the handoff as requiring closer human comparison rather than simple top-choice approval.

04

Action Drift Across Repeated Handoffs

What to watch: When the same task type generates handoffs over time, the suggested actions drift in format, granularity, or decision framing. Human reviewers develop inconsistent expectations, and downstream automation that parses handoff outputs breaks. Guardrail: Pin the output schema in the prompt with explicit field definitions and enum constraints. Run regression tests comparing handoff structure across a golden set of inputs to detect format drift before deployment.

05

Hallucinated Authority or Capability Claims

What to watch: The agent suggests actions that imply it has taken steps it cannot actually perform, or claims authority it does not have. The human reviewer may assume verification happened when it did not. Guardrail: Require the handoff to explicitly separate 'actions the agent completed' from 'actions the agent recommends a human take.' Validate in eval that no suggested action falsely implies agent execution. Flag any handoff where the agent claims to have modified external state without tool-call evidence.

06

Information Overload Masking the Decision

What to watch: The handoff includes exhaustive context, full reasoning traces, and every piece of evidence considered. The human reviewer cannot quickly identify what decision is needed and defaults to either approving everything or ignoring the handoff. Guardrail: Structure the handoff with a decision-first summary at the top, followed by expandable detail. Enforce a maximum length for the summary section and test that a reviewer can identify the pending decision within 30 seconds of reading.

IMPLEMENTATION TABLE

Evaluation Rubric

Criteria for testing the quality of an Agent Handoff with Suggested Actions prompt before shipping. Use these checks to validate that the output is actionable, well-structured, and safe for human review.

CriterionPass StandardFailure SignalTest Method

Actionability of suggestions

Every suggested action includes a concrete, executable next step for the human reviewer

Suggestions are vague (e.g., 'Review the account') or describe outcomes without specifying the action

Parse output; assert each action in [SUGGESTED_ACTIONS] contains a non-empty verb phrase and a clear object

Ranking rationale

Each suggested action includes a distinct rationale that explains its position in the ranking relative to other options

Multiple actions share identical or near-identical rationale text; ranking appears arbitrary

Extract rationale fields; check pairwise uniqueness with cosine similarity < 0.7; flag duplicates

Context completeness

Handoff includes all information a human needs to choose among actions without consulting raw agent logs

Human reviewer must open external systems or read raw logs to understand the situation

Provide handoff to a blinded reviewer; measure task-completion rate without external lookups; target > 90%

Risk flagging

Actions with potential negative consequences include explicit risk notes and mitigation suggestions

High-risk actions (e.g., account closure, data deletion) lack risk warnings

Scan [SUGGESTED_ACTIONS] for high-risk keywords; assert presence of non-empty [RISK_NOTES] field when risk keywords detected

Confidence transparency

Agent confidence is reported per suggestion, not as a single global score, with low-confidence items clearly marked

Confidence is omitted, reported only globally, or inflated (all > 0.95) without justification

Assert [CONFIDENCE_SCORE] exists per action; check distribution has variance; flag if all scores > 0.95

Evidence grounding

Claims supporting each suggestion are traceable to source data or prior agent steps with explicit references

Suggestions contain unsupported assertions or hallucinated facts not present in [AGENT_CONTEXT]

Extract factual claims; cross-reference with [AGENT_CONTEXT] using string match or embedding similarity; flag unmatched claims

Output schema compliance

Output strictly matches the defined [OUTPUT_SCHEMA] with all required fields present and correctly typed

Missing required fields, wrong types, or extra fields that violate the schema contract

Validate output against [OUTPUT_SCHEMA] using JSON Schema validator; reject on any validation error

Escalation threshold behavior

When agent confidence falls below [CONFIDENCE_THRESHOLD], the handoff explicitly recommends escalation rather than presenting low-confidence actions as choices

Low-confidence actions are presented without escalation recommendation or with misleading framing

Inject test cases with confidence below threshold; assert [ESCALATION_RECOMMENDED] is true and primary message directs to human escalation

ADAPTATION OPTIONS

Adapt This Prompt

How to adapt

Use the base prompt with a frontier model and a simple JSON schema. Start with a single handoff scenario and 3–5 suggested actions. Skip confidence scoring and evidence linking initially. Focus on getting the action ranking and rationale structure right.

code
[AGENT_CONTEXT]
[COMPLETED_ACTIONS]
[PENDING_DECISION]

Generate 3 suggested actions ranked by suitability.
For each action include:
- action_label
- rationale (1 sentence)
- required_input_from_human

Watch for

  • Actions that are vague or indistinguishable from each other
  • Rationale that restates the action without explaining why
  • Missing required_input_from_human fields that leave the reviewer guessing
Prasad Kumkar

About the author

Prasad Kumkar

CEO & MD, Inference Systems

Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.

His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.