- The Next Input by Cylentis AI
- Posts
- š® The Next Input ā Issue #120
š® The Next Input ā Issue #120
Claude Is Now Your Slack Intern

ā” The Briefing ā 60 sec
Anthropic launches interactive Claude apps for Slack and workplace tools
At this point itās less about what these tools can doāand more about what they wonāt be able to do in the future.Davos debates AI, energy, geopoliticsāand somehow Greenland
Pardon me sir, you left your Greenland in my OpenAI-branded Louis Vuitton swag bag.Australian jobs most at risk from AI as CEOs weigh in on the future of work
Funny how none of those CEOs see their jobs in jeopardy. Whole different conversation.
š ļø The Playbook ā The Workplace Agent Mesh
MissionāTurn Slack into a controlled agent layer that triages, drafts, and executes work across your toolsāwithout ābot sprawl.ā DifficultyāAdvanced Build timeā3 hours ROIā6 hrs/week saved ā 2 hrs/week (measured via Slack + ticket timestamps) with fewer dropped handoffs.
0) Why This Matters
Agents inside workplace tools are inevitableāSlack is becoming the control plane. The risk is letting 15 āhelpful botsā quietly turn into 15 unowned systems making untracked changes. This mesh gives you speed and accountability: who did what, where, and under which rules.
1) Architecture
Component | Tool | Purpose | Owner | Failure mode |
|---|---|---|---|---|
Entry point | Slack (channels + slash commands) | Where work is requested and confirmed | Ops lead | Requests scatter across DMs, no audit trail |
Router | GPT-5-mini | Decide which agent handles the request | Eng lead | Wrong routing ā duplicated work or missed tasks |
Executors | Claude 4.5 Sonnet | Perform scoped tasks (draft, summarise, extract, propose) | Function owners | āHelpfulā outputs that exceed scope |
Permissions | Open Policy Agent | Enforce role-based actions + approvals | Security | Permission creep / agents doing writes |
Observability | Langfuse | Trace prompts, actions, failures, drift | Eng | Silent failures and repeated mistakes |
System bridge | Internal APIs / webhooks | Read/write to tools (Jira, CRM, docs) | Platform | Write actions without confirmation |
2) Workflow
Request intake (Slack): User posts in
#ops-requestsor runs/agent helpwith the request.Scope check: Router labels the request type:
research,draft,ops-change,finance,people,unknown.Decision gate:
If
unknownā ask one clarification question and stop.If
financeorpeopleā default to draft-only + require approval.
Routing: GPT-5-mini selects the correct agent (single agent only).
Execution: Claude 4.5 Sonnet agent completes one task: draft, summarise, extract, or propose steps.
Write gate (critical): If the task touches a system change (ticket updates, record edits, deployments):
If confidence < 0.8 ā do not write; return a proposed patch + ask for approval.
If confidence ā„ 0.8 ā still require explicit
/approvefor writes.
Action + log: Once approved, the bridge executes and logs: input, output, diff, actor, timestamp.
Close loop: Agent posts a final Slack summary with: what changed, where, and rollback path.
3) Example Prompts
Router (GPT-5-mini)
Classify and route this Slack request.
Return JSON:
{
"category": "research|draft|ops-change|finance|people|unknown",
"best_agent": "name",
"needs_clarification": true/false,
"one_question_if_needed": "",
"requires_approval": true/false,
"risk_level": "low|medium|high"
}
Rules:
- If category is finance or people, requires_approval = true.
- If uncertain, category = unknown and ask one question.
Executor (Claude 4.5 Sonnet)
You are a scoped workplace agent. Complete ONE task only.
Task: {task}
Constraints:
- Do not write to external systems.
- If information is missing, ask one question and stop.
Output:
1) Result
2) Assumptions (if any)
3) Next action + whether approval is required
Tone: concise, operator-friendly.
Eval (Claude 4.5 Haiku)
Evaluate the agent output for:
- scope compliance
- missing steps
- risky assumptions
Return: PASS / FLAG / FAIL
If FLAG/FAIL, provide the minimal fix.
4) Guardrails
Draft-only by default. Writes require explicit approval.
One agent, one job. No āgeneral assistantā agents.
No silent permissions. Any new permission requires a human owner sign-off.
Immutable audit trail for every action and diff.
Hard block on sensitive domains (HR, health, legal) unless configured + approved.
5) Pilot Rollout ā 3 hours
Create Slack channels:
#agent-requests,#agent-audit,#agent-incidents.Stand up 3 agents only: Research, Comms Drafting, Ops Triage.
Implement routing + eval prompts and force draft-only.
Run 20 real requests through the system.
Success criteria: ā„80% correct routing, ā¤2 minutes to first draft, 0 unapproved writes, rollback tested once.
Expand to one write-capable workflow with
/approve(e.g., Jira ticket updates).
6) Metrics
Time to first useful output: 10 min ā 2 min (Slack timestamps)
Correct routing rate: 60% ā 85% (manual sample of 20/week)
Unapproved write attempts: baseline unknown ā 0 (OPA policy logs)
Task completion time (ops triage): 45 min ā 20 min (ticket lifecycle)
Repeat failure rate: 5/week ā 1/week (Langfuse error tags)
Pro Tip: If an agent asks for ājust one more permission,ā thatās not progressāthatās scope creep.
šÆ The Arsenal ā Tools & Prompts
Claude Apps for Slack Ā· Build native interactive agents inside Slack Ā· https://www.anthropic.com
Open Policy Agent Ā· Enforce approvals, scopes, and permissions as code Ā· https://www.openpolicyagent.org
Langfuse Ā· Trace every run, catch drift, and debug failures fast Ā· https://langfuse.com
Temporal Ā· Run durable agent workflows that donāt break mid-task Ā· https://temporal.io
Copy-paste prompt block:
You are a workplace agent operating under strict controls.
Rules:
- Draft-only unless explicitly approved.
- One task at a time.
- If unclear, ask ONE question and stop.
- Never assume permissions.
- Always return: result, assumptions, next action, rollback.
If the task touches money, people, or policy: require approval.
š” Free Office Hours
Want help implementing anything? Book a free 15-minute Office Hours slotāno sales pitch, just workflows solved.
Free, private email that puts your privacy first
A private inbox doesnāt have to come with a price tagāor a catch. Proton Mailās free plan gives you the privacy and security you expect, without selling your data or showing you ads.
Built by scientists and privacy advocates, Proton Mail uses end-to-end encryption to keep your conversations secure. No scanning. No targeting. No creepy promotions.
With Proton, youāre not the product ā youāre in control.
Start for free. Upgrade anytime. Stay private always.
š¹ļø Game Over
More agents doesnāt mean more chaosāunless you let it.
ā Aaron Automating the boring. Amplifying the brilliant.
Subscribe: https://cylentisai.beehiiv.com/subscribe

