From Agent to Workforce, part 4

Agentic Scrum is not Scrum with bots in the stand-up

Calling an AI agent a Developer does not settle who is accountable. Adding its output to a backlog does not make the backlog executable, inviting it to the Daily does not make its state transparent, and letting it say "done" does not create a Definition of Done. Production has accelerated without an equivalent transfer of accountability, so an agentic operating model has to change how work is represented, verified and authorized — not add machine participants to familiar ceremonies.

Alexander Volkov, PhDCo-founder, Research Lead · Learning science and cybernetics

1611 words

Preserve Scrum's logic, and its boundary

Scrum is defined as a lightweight, purposefully incomplete framework built on transparency, inspection and adaptation. Its fundamental unit is a small team of people accountable for creating a valuable, useful Increment, and work joins that Increment only when it meets a shared Definition of Done.

Schwaber and Sutherland, The 2020 Scrum Guidethe framework definition

Those distinctions are worth keeping. Scrum separates activity from a usable Increment, requires visibility before inspection, and assigns accountability to people who can own decisions and their consequences. An AI agent may perform development work; the accountability stays where it was.

What follows preserves the Guide's sequence: a Done Increment exists before the Sprint Review, and the Review inspects the outcome and adapts what comes next. Release may happen before or after that event. The Review is not turned into a release gate or an acceptance gate.

One lifecycle, with the states kept apart

Agentic work becomes hard to govern when done, verified, accepted and released are used interchangeably. Six states, each answering a different question:

  • Execution complete — the assigned producer has created the required artifacts.
  • Evidence-qualified — the result is tested against the acceptance criteria named in the assignment. Results that fail go back.
  • Verified, or Done in Scrum — the result satisfies the defined technical and procedural criteria.
  • Authorized — the next consequential action is permitted: a release, an external communication, a policy change.
  • Released or put into use.
  • Outcome measured — whether the intended business or user outcome actually appeared.

The rights stay separate too. An AI agent or an automated control may verify defined criteria. A deterministic gate may qualify a predefined low-risk transition under a policy people approved in advance. A decision-right holder accepts residual risk and authorizes a consequential action. The person or institution that delegated those rights remains accountable. Automation does not acquire accountability by applying a rule — it executes previously delegated authority inside a defined envelope.

Two clocks over one team

Human and AI agent work run at different speeds. The human loop moves from goal to priority to judgment to accountable decision, and may take hours, days or a whole Sprint, because its context is social and organizational. Inside that loop, AI agent cycles move from execution to checking to repair in seconds or minutes, several of them in parallel before human attention is needed.

Forcing both clocks into the same ceremony either destroys the speed advantage or weakens the control. People should not attend a meeting for every AI agent pass, and AI agents should not run far beyond the state that people can inspect and authorize. The alternative is nested: people set autonomy boundaries, verification requirements, escalation triggers and review capacity; AI agents execute inside them; human attention goes to exceptions, conflicting evidence, changed risk, and decisions that exceed delegated policy.

The events change emphasis, not purpose

  • Planning still asks why the Sprint is valuable and what can be done. It adds the design of parallelism and verification: isolated workspaces, dependencies, integration order, independent checks, escalation paths, conflict ownership, and the maximum review load the team can absorb.
  • The Daily stays an inspection of progress toward the Sprint Goal, but routine AI agent status is collected automatically. Human discussion concentrates on failed checks, contradictory outputs, blocked dependencies, changed external facts, approaching permission or cost limits, and decisions that need judgment.
  • The Sprint Review stays a working session for inspecting the outcome and adapting the backlog. The agentic addition is a clearer evidence trail: which Increment is verified, what was released, what outcome has been observed, and what uncertainty remains.
  • The Retrospective expands from social learning to system learning. A recurring failure becomes a corrected context source, a changed task template, a new test, a tighter permission, a different routing rule or a revised escalation threshold — not a story people and future AI agents are expected to remember.

The arithmetic under Planning is the part teams skip. If AI agents can generate one hundred changes while the team can verify ten, the plan has produced a queue and called it capacity.

Evidence and control can be engineered

RADAR classifies a change, applies eligibility and risk gates, combines learned and deterministic checks, and automates only the population covered by policy — risk-bounded delegation rather than autonomous organizational judgment.

Adams et al., Meta, Automating Low-Risk Code Review at Meta: RADARtelemetry over more than 535,000 RADAR-reviewed changes, of which more than 331,000 landed

Existing standards already carry parts of the same architecture. SLSA formalizes provenance and artifact verification for software supply chains. OpenTelemetry's GenAI conventions can represent AI agent, model and tool execution in one trace. The Model Context Protocol recommends that a person be able to inspect and deny sampling requests. None is a management framework on its own, and together they make the point that evidence and control can be engineered rather than reconstructed from conversational memory.

Roles and responsibilities for human decision-making and AI oversight should be clearly defined and differentiated.

NIST, AI Risk Management Framework — Corea voluntary governance framework

What this does not show

Almost nothing in this piece is measured. The lifecycle, the two clocks, the split of rights and the measurement set are an 8Hats working model, and the evidence cited supports the components — a provenance spec, a tracing convention, one company's review system — not the model built out of them.

It is also not an extension of Scrum. The Scrum Guide defines a framework that is deliberately incomplete, and nothing here has standing inside it. Where this proposal and the Guide could be read as disagreeing, the Guide is the authority and this is one organization's practice.

And the name may be wrong. Agentic Scrum is a bridge because Scrum already values empiricism and inspection, but the model may be better described as evidence-gated delivery. The operating principle matters more than the label: when production becomes cheap, management organizes verification, authority and learning.

What follows for us

This completes a correction the series has been making in four steps. Capability is not self-management. Communication is not coordination. Activity is not productivity. And production is not a verified outcome. Each separates a thing that is easy to observe from a thing that actually decides whether the work was worth doing.

8Hats Lab's working answer is the human–AI team: people and AI agents inside one outcome boundary, with different interfaces and different rights. People keep accountable judgment, AI agents provide execution and search, automated controls verify defined conditions, and policy governs which transitions may happen without another decision. The task definition that moves through it holds three synchronized views rather than one prose ticket.

It is an 8Hats lifecycle proposal, and it has not been tested against alternatives. The site says the same thing on its research pages, and this page does not say it more confidently than that.

Questions this answers

What is agentic Scrum?

A way of running Scrum in which the states of work are kept apart — execution complete, evidence-qualified, verified or Done, authorized, released, outcome measured — and the rights over those transitions are assigned explicitly to AI agents, automated controls, policies and named people. It preserves Scrum's sequence and its accountability boundary rather than adding machine participants to existing ceremonies.

Can an AI agent be a Developer on a Scrum team?

An AI agent can perform development work. Organizational accountability stays with the people and institutions deploying it, which is what the Scrum Guide's small team of accountable people is for. Naming an AI agent a Developer transfers the label without transferring the accountability, and that gap is where an unverified artifact becomes a released one.

What belongs in a Definition of Done when AI agents do the work?

The verified state of the Increment, and not more than that. Depending on risk it may require fixed inputs and versions, reproducible output, passed tests, provenance, independent checks, satisfied security constraints, successful integration and a documented recovery path. Done should not claim business value, which is only observable after use, and it should not always fold in human acceptance of residual risk, because some low-risk transitions run under a policy approved in advance.

How should a team measure a mixed human and AI agent workflow?

By verified throughput rather than volume: time from approved intent to a Done result, human verification and exception time, authorization delay, rollbacks and incidents, cost per released result including inference and human attention, and the business or user outcome observed after release. Story points lose meaning when production capacity is elastic, and counting completed tasks rewards fragmentation.

Sources

Each with the population its figures are drawn from, and what it does not establish.

Fill in the contact form

Tell us where this reading is wrong, and on what evidence.