# One agent for all your work is a front door, not an operation

> Google now offers a single, universal agent for work. A universal agent is a good front door. The operation behind it still has to be designed, step by step.

- Type: Opinion
- Published: 2026-10-24
- Author: Sentynel
- URL: https://sentynel.ai/sygnals/one-agent-for-work-is-a-front-door/
- Language: en

At Gemini at Work 2026, Google announced "the Gemini agent: your new single, universal agent for work." It is a sensible product and a sensible bet: one place where employees ask, delegate and get things done. But **a universal agent is a front door. It is not an operation.** The work a company repeats every day still needs rooms, hallways and owners, and no door builds those for you.

## What "universal" actually solves

Google's announcement describes an agent that answers questions, handles knowledge work, creates media and writes and runs code. Its coworker agents get dedicated identities, their own email addresses and persistent storage, and they only access the context that people give them. Every action is written to an audit trail and attributed to the agent rather than to a person. A project's AI spend can be capped, and when the cap triggers, that project's agent pauses.

That solves real problems: where people go, who did what, how much it costs. Those are questions about **access and cost**. None of them is a question about **the work**.

## The operation is specific, and that is the point

A universal agent is general by design. A company's operation is the opposite. It is a particular sequence of steps, owned by particular people, with particular exceptions:

- **Where does a request enter,** and in what form?
- **Which record is the truth** once it has?
- **Who decides** when the agent is unsure?
- **What counts as finished,** and where is that written down?

Ask a general agent to "handle customer follow-ups" and it will produce a reasonable answer to a vague question. Ask it to run stage three of a defined follow-up flow, with a named owner and an exit condition, and it can do the job and be measured. **The generality of the agent is only useful once the operation around it is specific.**

## Why this matters more as agents get more capable

Microsoft's security team made a point on October 19 that applies beyond security: "We should not ask a model to be its own security authority." Replace one word and it holds for operations too. We should not ask a model to be its own process. If the procedure lives only inside the agent's context, it changes whenever the prompt, the model or the day changes, and nobody can review it.

The procedure belongs outside the model: written down, owned, versioned. The agent follows it. When it can't, it escalates to a person. That is why the most capable agent in the world, dropped into an operation nobody redesigned, mostly produces faster motion.

## What this looks like in practice

Take a case Sentynel reports. In Rodo's first measured window, 82% of live-created enquiries reached Resolved, with a median of about one hour. The result came from making the path to resolution visible: every conversation from WhatsApp, social or web had a place in the operation and a defined next stage. It was not a smarter assistant that produced it.

**Rodo · first measured window**

- 82%: of live-created enquiries resolved
- ~1 h: median to resolved

Source: Sentynel case record: Rodo operational report, 24 September 2026. The resolution cohort covers 31 August–24 September. Figures describe pipeline records, not all conversations. First measured window, no comparable earlier baseline.

## A test before you pick a front door

Before you decide which universal agent your team should use, run one test. Pick the workflow that costs you the most time and write its path on a single page: entry, record, owner, exit. If you can't, the agent is not what is missing. If you can, any good agent will work inside it, and you can change vendors later without redesigning anything.

**Door first, or operation first**

1. Entry — Where the request arrives
2. Record — One source of truth
3. Owner — A person who decides
4. Exit — What finished means

**Design the operation first, then put agents inside it.** The front door can be whichever one you like.

## Sources

- https://cloud.google.com/blog/products/ai-machine-learning/welcome-to-gemini-at-work-2026
- https://www.microsoft.com/en-us/security/blog/2026/10/19/agents-are-your-newest-insiders-security-must-move-at-their-speed/