Escalation is the safety valve for agent autonomy. Even a well-designed agent will hit cases it cannot resolve: requests with low model confidence, values that fall outside normal ranges, or conversations where customer sentiment turns negative. If those cases do not reach a human reliably, the agent converts recoverable errors into failed outcomes.

A trigger list on paper is not enough. The routing, context transfer, and ownership of the handoff must be tested on a real case, because the failures that matter usually live in the plumbing: lost conversation history, queues nobody monitors, or agents that stop mid-turn and leave the customer waiting. Only a drill on a real case proves the whole path works.

Business process map with human escalation points

Escalate the unusual

  • Low-confidence answers are guesses with extra steps; route them to a human instead of shipping them.
  • Unusual values, such as refunds above a threshold or atypical account changes, deserve review even when the agent is confident.
  • Negative sentiment signals a deteriorating customer relationship that automation should not compound.
  • The handoff must carry context, so the human sees what the agent tried and why it stopped.

Define and drill the handoff

  1. Document explicit triggers during agent planning: confidence thresholds, value limits, topic exclusions, and sentiment conditions.
  2. Implement routing with an Omni-Channel flow so conversations transfer to the right queue with the transcript attached, and confirm the queue has monitored coverage.
  3. Define what the human receives: full history, the trigger that fired, and any actions already taken.
  4. Drill the path end to end on a real case, then verify the transfer, queue monitoring, and response time in production.
Further reading

Resources

This article is based on the following Salesforce learning and product documentation.

Continue the architecture path
ControlMinimal Action Surface

Filter unavailable actions and restrict write permissions so the agent can only do what its use case requires.

ControlPost-Release Control Verification

Re-verify action filters and write permissions against the mandate after every release or org change.

ControlPrompts Are Not Controls

Move every rule that must hold deterministically out of the prompt and into enforced platform mechanisms.