Back to blog

Why AI agents keep failing at real work

Every vendor is selling "AI agents" that supposedly run your business while you sleep. The research tells a less flattering story: left alone, today's agents finish only a minority of real office tasks. That gap is not a reason to ignore agents. It is the whole reason they have to be built properly.

The pitch is everywhere now. Autonomous AI agents that handle your inbox, chase your leads, update your systems, and answer your customers, all without a human in the loop. The demos look incredible. The reality, when businesses actually deploy them, has been a lot bumpier.

Two pieces of news from the last eighteen months tell the story better than any sales deck.

The benchmark: agents fail most of the time

When researchers at Carnegie Mellon built a simulated software company and handed real office jobs to the leading AI agents, the results were sobering. Across realistic tasks - things like filling in a form from data spread across systems, navigating an internal tool, finishing an admin workflow - the best agents completed only around a quarter to a third of them autonomously. The rest stalled, took a wrong turn, or confidently produced the wrong result.

Other studies through 2025 found the same pattern on customer-facing and CRM tasks: strong performance on the simple, single-step jobs, and a steep drop-off the moment a task required several steps, a judgement call, or data the model did not actually have.

That is the key insight. An agent does not fail because the model is stupid. It fails when it is asked to act across multiple steps with no boundaries, no access to the right data, and no human checkpoint.

The lawsuit: a hallucination with a price tag

Then there is the case every business should know about. Air Canada's website chatbot told a grieving customer he could claim a bereavement discount retroactively. That policy did not exist - the bot made it up. When the airline refused to honour it, the customer took them to a tribunal, and Air Canada was held liable for what its chatbot said. The company's argument that the bot was a "separate legal entity" responsible for its own answers did not survive contact with reality.

The lesson is not "do not use AI." The lesson is that an AI speaking on your behalf is you. If it invents an answer, that is your problem, your liability, and your reputation.

Put the two stories together and you get the real state of AI agents in 2026: enormously capable, genuinely useful, and completely unfit to run unsupervised on a vague brief. The businesses getting burned are the ones who bought the "set it and forget it" fantasy. The businesses getting value are doing something narrower and more deliberate.

What actually works: scope, grounding, and guardrails

Every reliable AI deployment I have seen, and every one I build, comes down to three things the autonomous-everything pitch quietly skips.

1. A scoped role, not an open mandate

The agents that fail are asked to "handle operations." The agents that work are asked to do one well-defined job: research and score inbound leads, triage the support inbox, draft a proposal from a template. The narrower the scope, the higher the success rate - the same benchmarks that embarrass general-purpose agents show strong results when the task is bounded. This is exactly why I build AI agents around a single role rather than a do-everything assistant.

2. Grounding in your real data, not the model's guesses

The Air Canada bot hallucinated because it was answering from general knowledge instead of the airline's actual policy. The fix is a technique called RAG - retrieval-augmented generation - where the AI is forced to pull the relevant facts from your own documents before it answers, and to cite where the answer came from. An AI that says "here is the policy, and here is the page it is on" is a different and far safer animal than one that improvises. That is the entire point of a grounded knowledge assistant.

3. Guardrails and a human checkpoint where it matters

A good agent has limits written into it: what it is allowed to do on its own, what requires approval, and a full log of every action so you can see what happened and roll it back. "Autonomous" should never mean "unaccountable." For the steps that carry real money or real risk, a human signs off. For the routine 80%, the agent runs on its own. That split is where the time savings actually come from.

The honest takeaway for your business

AI agents are not magic, and they are not a toy. They are a powerful tool that works astonishingly well inside the right fences and embarrasses you outside them. The headlines about agents failing are not an argument against using AI. They are an argument against deploying it lazily.

If you are thinking about putting an AI agent or chatbot in front of customers, or behind your operations, the question to ask a developer is not "can it do everything?" It is "how is it scoped, how is it grounded in our data, and where does a human stay in the loop?" If they cannot answer all three, that is the Air Canada chatbot waiting to happen.

That is the part I find genuinely interesting to work on - building AI that is useful precisely because it knows its limits. If you want to talk through where an agent could save you real hours without creating new risk, get in touch.

Thinking about an AI agent for your business?

I build scoped, grounded AI agents and knowledge assistants for real business roles - with the data access and guardrails that keep them reliable. No "set it and forget it" fantasy, just AI that does a defined job well. Get in touch for a conversation.

Get in touch