AI agents handle narrow, repeatable tasks well, but their reliability drops in long, multistep workflows. The key is designing systems that catch failures before they spread.
AI agents can perform simple interface tasks with reasonable consistency. Their performance drops sharply when a workflow requires them to coordinate multiple steps, retain context, and verify that each action produced the expected result.
That pattern appears in UI-CUBE, a benchmark of computer-use agents on enterprise tasks. Across five current models, success rates ranged from 67% to 85% on simple interface interactions—below the 97.9% human benchmark, but high enough to support limited, well-defined use cases. On complex, multistep workflows, success rates fell to 9% to 19%. Human participants unfamiliar with the applications also found those tasks more difficult, reaching 61.2% accuracy, but agents declined much further.
Complex workflows demand more than accurate clicks and data entry. Agents need to maintain state across steps, follow the right sequence, respond to unexpected changes, and confirm that the workflow produced the intended result.
For enterprise teams, the takeaway is to build around those constraints. Start with discrete, repeatable tasks; break larger processes into verifiable steps; add approvals for consequential actions; and establish monitoring and recovery paths before moving into production.
The six practices below focus on designing agent workflows around those constraints.
1. Keep each agent's scope tight, and split it when it grows
Decide upfront how much one agent is responsible for, and keep it narrow. An open-ended goal like "handle the request" leaves the whole path up to the agent, which is the long, complex type of work where it does worst. A tight goal like "pull these fields from this form and stop" is bounded and easy to check.
When a job outgrows one tight scope, don’t stretch the scope to fit. Instead, you should split it across two agents, each with its own clear job, and hand off between them. This is less about a backup doing the same work and more about giving each agent less to carry. By doing so, a failure lands in one small job you can see and fix, rather than somewhere inside one overloaded, hard-to-debug run.
2. Break the work into small, checkable steps
UI-CUBE’s findings point to a practical design choice: don’t ask an agent to complete a long, unbroken workflow when the work can be divided into smaller, verifiable steps. The benchmark found a sharp decline in performance on complex workflows, which reflects the difficulty of maintaining context, following the correct sequence, and recovering when an intermediate action doesn’t produce the expected result.
Instead, break the process into discrete tasks the agent can complete reliably. Define the expected outcome for each step, validate it before the workflow continues, and create a clear recovery path if the check fails.
One long unbroken task is a lot to ask. It’s like handing someone a twelve-step recipe and asking them to cook it start to finish, without once looking down at the page.
3. Check the real state after every step
The agents didn’t just slow down on hard tasks—they made confident mistakes that were hard to spot. Instead of trusting the agent’s own account of what happened, you should read the real state of the thing you just changed after each step, and confirm the step did what it should before moving on.
The benchmark itself grades this way, by inspecting the actual application state instead of the agent's narration.
4. Keep the state outside the model
Many of the difficult failures in UI-CUBE involved maintaining state across a multistep workflow. An agent may need to know which records it has already processed, what values have been updated, which exception requires follow-up, and where it is in the overall sequence. The benchmark identifies memory management and state coordination as core limitations in current computer-use agents.
Don’t rely on the model’s conversational context to serve as the system of record. Store progress in a structured, durable location that the agent can read from and update as it works—for example, a database record, workflow state object, queue, or task table.
That gives each step a shared source of truth: the agent can confirm what has been completed, retrieve the current values it needs, and resume or recover without reconstructing the workflow from a long interaction history. It also makes the process easier to audit, test, and hand off when a human needs to intervene.
5. Design for recovery, not just success
Long chains fail at the weak link, and a stuck agent tends to repeat the same failed action instead of stopping. Put a validation gate after each risky step, with a retry limit and a clean stop when a step won’t pass. Catching a wrong turn on step three is far cheaper than finding it at step twenty, after the whole chain has run on bad state.
6. Shrink the action space, and gate the point of no return
Fewer tools means fewer ways to go wrong, so give the agent the smallest set of actions the task needs, not everything it might ever use. And for actions you cannot take back, like sending a message or moving money, put a person or a hard confirmation in the loop before the agent commits. The cost of a wrong click is very different once it cannot be undone.
The takeaway
Computer-use models will improve, and the boundary between reliable and unreliable tasks will shift. However, the current pattern is clear: agents perform more consistently on discrete, verifiable steps than on long, unstructured workflows. UI-CUBE found 67% to 85% success on simple interactions, compared with 9% to 19% on complex workflows.
Build around what works today. Give agents narrow, repeatable tasks, validate each result, keep workflow state outside the model context, and route exceptions or high-impact actions to people. That creates a system teams can use now and extend as models improve.
AI agents often struggle with complex workflows because they must maintain context, track changing state, follow the correct sequence of actions, and recover when an intermediate step fails. In the UI-CUBE benchmark, five computer-use agents completed simple interface tasks at rates of 67% to 85%, but their success on complex, multistep enterprise workflows fell to 9% to 19%.
What types of tasks are AI agents best suited for?
AI agents are best suited for narrow, repeatable, and clearly defined tasks with a limited number of approved actions. Examples include extracting specified fields from a form, classifying incoming requests, updating a record after validation, or routing a completed task to the next system. These bounded workflows are easier to test, monitor and recover when something goes wrong.
How can enterprises make AI agent workflows more reliable?
Enterprises can improve AI agent reliability by breaking larger processes into small, verifiable steps; defining the expected outcome for each step; and checking the actual system state before the workflow continues. Teams should use structured workflow state—such as a database record, queue, or task table—rather than relying on the model’s conversation history as the source of truth. UI-CUBE specifically identifies memory management, hierarchical planning, and state coordination as important limitations in current computer-use agents.
Why should companies keep workflow state outside an AI agent?
Keeping state outside the model provides a durable, auditable record of what has happened, what remains to be done, and which exceptions need attention. A database, workflow-state object, or task queue can allow an agent or human operator to resume work without reconstructing a lengthy interaction history. Externalized state also supports testing, monitoring, accountability, and safer recovery after errors.
When should a human approve an AI agent’s actions?
A human approval step should be required before an AI agent takes actions that are consequential, irreversible, or difficult to correct. This can include sending external communications, submitting financial transactions, changing customer or employee records, deleting data, granting access, or publishing content. For lower-risk steps, teams can use automated validation gates, retry limits, and escalation paths that stop the workflow when results do not match expectations.
AI is changing software development.
The Engineer's AI-Enabled Development Handbook is your guide to incorporating AI into development processes for smoother, faster, and smarter development.
Enjoyed the article? Get new content delivered to your inbox.
Subscribe below and stay updated with the latest developer guides and industry insights.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
We use cookies to provide our services, to allow us to better understand our audience, and to provide and serve personalized ads or content. By using our website, you consent to the terms of our Privacy Policy and our Cookie Policy, and the use of cookies, pixels, and other technology as described more fully therein
The GPC signal has been honored.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.