Skip to main content
Back to how-to guides Use this guide to tune the agent execution pipeline: the classifier model, the execution mode, confidence thresholds, tool filtering, keyword veto, intent bridging, and fallback behavior.

Concept

EXECUTION.pipeline settings are routing controls. They do not replace the handoff rules of the supervisor. They decide how much the runtime relies on a classification pass before the normal reasoning path. The runtime resolves the effective configuration in this order:
  1. The project enables the pipeline. If the project does not enable it, the agent settings have no effect.
  2. The agent can opt out with enabled: false. An agent opt-out wins over a project that enables the pipeline.
  3. For each field, the agent value wins, then the project value, then the default.
Two settings exist only at the project level: the pipeline model and the master switch. Set them in Studio under the project Runtime Config, in the Reasoning Pipeline section.

Defaults

The project Runtime Config accepts thresholds from 0 to 1, maxTools from 1 to 100, and up to 500 veto keywords of 200 characters each.

Pipeline model

The classifier and the tool filter use the pipeline model. Set it in the project Runtime Config under Pipeline Model:
  • Default uses the tool_selection model of the project.
  • A workspace model uses that model, and its connection when the model has several.
The model field in EXECUTION.pipeline has no effect. Remove it from existing agents. If a selected workspace model fails, the runtime falls back to the default model. When model access is enforced for the project, there is no fallback and the pipeline step is skipped for that turn.

Minimal working example

Use this example to enable the pipeline and keep the first deployment conservative. The supervisor needs categories and routes. Without them the classifier does not run.
This example uses sequential mode and allows short-circuiting only at confidence 0.9 or higher. The project must also enable the pipeline.

Full configuration example

This separate supervisor tunes every setting.
The veto words appeal, fraud, and legal stop short-circuiting to Escalation_Agent. Those messages go to guided reasoning. The runtime never hides escalation handoff tools in guided mode, so the supervisor can still choose the escalation route.

How it works

Mode

  • parallel runs the classifier and the tool filter at the same time. It is faster, but the tool filter call runs even when the classifier short-circuits.
  • sequential runs the classifier first. If the turn short-circuits, the tool filter does not run. This costs less and adds latency when the turn does not short-circuit.

Short-circuit threshold

shortCircuit.confidenceThreshold is the only threshold that controls direct routing. A single intent with a category, a confidence at or above the threshold, one resolved target, and no veto match routes without a reasoning turn. Higher values reduce misroutes and send more traffic to guided reasoning.

Intent bridge thresholds

  • programmaticThreshold applies only to out-of-scope decline. The agent declines when every intent is out of scope, confidence is at or above this value, outOfScopeDecline is true, and the agent declares LIMITATIONS.
  • guidedThreshold is the floor for guided reasoning. At or above it, reasoning runs with routing hints and hidden handoff tools. Below it, the turn is autonomous.
  • Set guidedThreshold below programmaticThreshold and below shortCircuit.confidenceThreshold.

Keyword veto

keywordVeto.keywords stops short-circuiting when a word appears in the message. The match is by whole word and ignores case. The runtime also adds the words from the names of the agent tools, split on underscores. Words shorter than three characters are ignored. Handoff and delegate tools add no words.

Tool filter

The tool filter asks the pipeline model for the two to maxTools most relevant tools for the message.
  • It filters only the domain tools of the agent. System, handoff, and delegate tools always stay available.
  • It skips the model call when the agent has no domain tools.
  • It keeps the full tool set when the model call fails, times out after 10 seconds, returns an unreadable answer, selects fewer than two tools, or the prompt exceeds its size budget.

Fallbacks

  • A failed classifier call or an empty result leads to autonomous reasoning. The runtime records a pipeline_classifier_unavailable trace event.
  • After three consecutive pipeline failures for a tenant, a circuit breaker bypasses the pipeline for 60 seconds. One probe then runs.
  • Classified categories that match no route leave the decision to the supervisor.
Since none of the HANDOFF entries in the full configuration example declare HISTORY, each specialist receives the full conversation history by default (the current platform default when HISTORY is omitted).

Common variations

Configuration checklist

Verification

  • Validate the ABL and confirm the project Runtime Config enables the pipeline.
  • Compare behavior with the project enabled and the agent opted out.
  • Send a message just below and just above shortCircuit.confidenceThreshold. Confirm the handoff happens only above it.
  • Send a message that scores between guidedThreshold and the short-circuit threshold. Confirm a guided pipeline_tiered_action event.
  • Send a message with each veto word. Confirm there is no short-circuit.
  • Send an unrelated message with outOfScopeDecline on. Confirm the decline_out_of_scope action.
  • Check pipeline_classify for the model, categories, and confidence. Check pipeline_filter for the filtered tools and the fellBack value.

Production readiness checklist

  • The project enables the pipeline and selects a pipeline model.
  • Project-level and agent-level pipeline settings are documented together.
  • Thresholds come from real utterance samples and are reviewed after launch.
  • Escalation or fallback routes exist for sensitive and ambiguous categories.
  • Veto words are reviewed for false positives and false negatives.
  • Tool names do not contain common words that veto short-circuiting.
  • Tool filtering does not hide tools needed for safe recovery.
  • Dashboards track tier distribution, short-circuit rate, guided rate, autonomous rate, and fallback rate.

Common mistakes

Troubleshooting