产品与架构决策
- Scope organisational data and workflows by tenant before agents or retrieval can consume them.
- Run agent work through a queue rather than treating a chat response as a completed business action.
- Encode human-review notices in agent definitions and keep model routing separate from business modules.