The architecture of agentic systems is starting to look more and more familiar.
Spend enough time in ChatGPT, Claude, or Gemini, and you see many of the same patterns and building blocks repeating themselves: tools and connectors that let the model act, context assembled and compacted when it’s needed, specialized skills that can be loaded for a given task, and human approval before potentially dangerous actions. Different labs are arriving at similar patterns because the underlying problems are the same. Agents need context. They need ways to execute things. They need guardrails, boundaries, and ways to align with their operators. And once more than one agent or task is involved, something has to coordinate the work across them.
The same convergence is now showing up inside enterprises deploying GTM agents. In the influential Building Effective Agents, Anthropic distinguishes engineered workflows from more autonomous agents and when to use which. Anthropic also describes patterns such as orchestrator-workers that coordinate multi-agent systems and evaluator-optimizers to check and improve work. In its Well-Architected Agentic AI Lens, AWS formalizes model selection, cost controls, bounded autonomy, and human oversight required when moving agentic systems from prototypes into reliable, scaled production. In Stacks on a Plane: Reshaping Martech on a Universal Data Layer, Scott Brinker describes martech moving toward a shared data and context substrate as agents need access not just to application data, but to the broader context required to understand customers, prior actions, and current state.
MCP has become a common connection layer between agents and tools, replacing one-off integrations with a standard protocol for connecting AI systems to external data and applications. Registries, reusable skills, evaluation, and policy enforced outside the agent itself are increasingly recognizable parts of the stack.
Across those approaches, a common set of elements keeps appearing:
- Engineered workflows that define how work should flow
- Orchestration to interpret intent, decompose work, and coordinate execution
- Specialist agents focused on specific tasks rather than one agent trying to do everything
- Model access and routing so different work can use different models fit for purpose as token subsidies go away
- Shared context that gives agents the business, customer, and policy knowledge they need given their task
- Reusable skills that formalize how recurring work gets done consistently
- Tools and MCPs that let agents actually execute something in the world
- A shared data foundation underneath the system
- Governance, evaluation, and human oversight spanning the whole thing
Marketing and GTM-specific versions are appearing as well, and we’re starting to see these components assembled in more consistent ways. Ian Kim’s Agentic Marketing Blueprint is one of the clearest practitioner examples, combining a campaign backbone with orchestration, specialist agents and skills, context engineering, data, agent operations and governance. BCG’s agentic marketing architecture approaches the problem from the CMO and organization transformation side, with a four-layer model spanning data, brand intelligence, agents and a unified marketer experience. Omnicom and Adobe have begun productizing the model through their AI Agentic Operating Model, connecting orchestration, specialized agents, enterprise context, and governance across the full marketing lifecycle.
Different starting points, but the same familiar ingredients: workflows, orchestration, specialist agents, context, tools, data, governance, and human oversight. The question is how all of that actually comes together when agents start doing real GTM work and where human direction, verification, and accountability live in the system.
How the Agent Operating Model fits together
The architecture that’s emerging has four structural parts:
- Seven operational layers are how the work runs: Engineered Workflows, Orchestration, Specialist Agents, Governed Context, Skills, Tools & Actions, and the Data Foundation. Model Access sits across orchestration and agents because models are more of a modular resource that can be swapped out over time (frontier lab models, cloud-hosted, open-weight, or specialized models).
- Two human layers—Direction & Verification—bookend the system. Humans establish the outcomes, constraints, policy, taste, and judgment that guide the work upfront. Then humans evaluate the work, exceptions, and results coming back. Some have started referring to this common AI workflow pattern (for better or for worse 😉) as the ‘human sandwich.’
- Governance & Accountability runs through every layer, because authority, permissions, limits, and review aren’t just a downstream compliance check at the end. They determine what the system is allowed to do while it runs.
- A learning path closes the loop. What happens in production feeds back into Direction, Governance, Context, Skills, and future Workflows. That’s what allows the system to improve over time.

01 — Engineered Workflows
The first layer is the workflow. Take a marketing Campaign as an example workflow: it moves from outcome to audience, channel, content, activation, measurement, and learning. Some of that work may be fixed and deterministic…some may require LLM reasoning or judgment…and some will still belong with people.
A Campaign is only one kind of workflow. An ABM motion might have its own workflow. So might a lead-to-opportunity handoff, where an inbound signal might trigger account research, qualification, an account brief, and a handoff to sales. In practice, GTM work often crosses the organizational boundaries between marketing, sales, and customer success, which is why we think the workflow is a more useful unit of design than the campaign or an individual functional tool.
We’ve written more about how to prioritize and re-engineer workflows for humans and agents in: Everyone Says Redesign the Work. No One Says How.
02 — Orchestration
In a martech world where everyone wants to start with tools, it helps to start by thinking of the Orchestrator as a role vs. a tool. This has gotten murky because it’s emerging as a product category delivered in different flavors. In the end, something has to translate human intent into a plan, keep the work aligned to the objective and constraints, break it into pieces, decide which agents or tools should do what, sequence the execution, and maintain the state of the run. That’s orchestration whether it happens inside a suite-native platform (like Salesforce Agentforce or Adobe Agent Orchestrator), a hyperscaler (like AWS Bedrock or Google Vertex AI), a horizontal agent platform (like LangChain/LangSmith, Airtable Hyperagent, or WRITER), a domain-specific system of work (like Gradial, Typeface, or Clay), custom software or some combination of the above.
That’s why the orchestration choice matters so much architecturally. The Orchestrator sits in a privileged position: it sees the objective, the work, the agents, the context, and the actions. Whoever owns that layer can end up owning a meaningful part of how your GTM organization actually works — which makes the choice important for governance, learning, and vendor lock-in.
03 — Specialist Agents
Below orchestration sit the agents doing the actual work. The pattern is increasingly toward narrower specialists rather than one agent trying to do everything. That makes the work easier to scope, the context easier to manage, and troubleshooting easier to diagnose. An audience builder, for example, has a very different job from an agent doing account research, generating creative, scoring leads, or analyzing performance. Each can operate inside a bounded domain without needing to understand the entire GTM system.
We also think oversight agents will become just as important as execution agents. They can independently check claims against an approved set of criteria, test work against brand or policy rules, verify consent, or flag exceptions before something proceeds. That helps scale review without requiring a person to inspect every output. That said, oversight agents are a tool to extend review capacity. They don’t replace human accountability.
Model Access
We treat Model Access as a shared layer across orchestration and specialist agents because the model itself shouldn’t become a fixed part of the architecture. Different tasks have different needs for reasoning capability, speed, and cost, so the system should be able to swap or route work across models rather than hardwire everything to one provider.
That’s already where the market is heading. Databricks’ State of AI Agents telemetry found that by October 2025, 78% of companies on its platform were using two or more model families, and 59% were using three or more. Multi-model environments are becoming the norm.
Models will change quickly. The architecture around them should be built to survive that.
04 — Governed Context
Governed Context is the shared knowledge agents need at the moment of work: brand, ICPs and personas, buying groups, account score, product specs, policies, permissions, and other business context. The important point is that this shouldn’t be recreated inside every AI tool. If brand voice or customer definitions live only inside the creative platform, then every other agent has to replicate it. Another important consideration is the context engineering required to give the agent/model what it needs—and only what it needs—to avoid introducing noise and reducing predictable reasoning.
This also changes how we think about the CDP. Its traditional data role is increasingly moving down into warehouses, lakehouses, and broader enterprise data platforms, while decisioning and activation are moving up into agentic systems. The basic capabilities don’t disappear, but we may find that over time the platform matters less. That’s why we separate Governed Context from the underlying Data Foundation rather than treating the CDP as a permanent layer. Time will tell!
05 — Skills
If context is what an agent needs to know, a skill is how to do a repeatable kind of work. It’s a codified playbook (usually in markdown) that describes the steps, methods, rules, tools, and guardrails an agent needs to accomplish a task consistently. An ICP definition is context. How to qualify an account against it is a skill. Your brand voice is context. How to turn a product brief into on-brand copy is a skill.
Skills capture repeatable methods that agents can call when needed. Keeping them separate allows us to manage context and keeps agents from becoming overloaded bundles of prompts, instructions, and knowledge. It also makes them portable so they can be used with multiple agents and different models. The agent is the actor…the skill is one of the methods it can use.
06 — Tools & Actions
At some point, the agent has to act: read or write to CRM, create a segment, publish content, send an email, update a page, or call another enterprise service. This is where APIs, connectors, and MCP servers come in.
MCP is useful because it gives agents a more standard way to connect to tools and systems instead of engineering every integration from scratch. Just as important, the tool layer separates reasoning from execution: the agent decides what should happen, while the tool controls how that action is carried out and plays an important role in enforcing what the agent is actually allowed to do. That distinction matters more as agents move from reading data to changing it. The question is no longer just, “Can the agent access the CRM?” It’s “What can it change, under whose authority, and with what controls?”
07 — Data Foundation
Underneath everything is the data foundation: systems of record, the warehouse or lakehouse, and the shared definitions that keep the business working from the same version of truth. Agents don’t make the data problem go away. If anything, they make bad data more consequential. A stale dashboard gives you an old insight…a stale agent context can trigger the wrong action…and that can directly impact a customer experience.
The top of the stack will change quickly. The foundation should be built to last.
Governance operates in two modes
Governance runs through every level of the system, not as a final approval step after the work is already designed. We think about it in two modes: enforced governance and exercised governance.
Enforced governance is what the system makes impossible to violate: permissions, data policies, allowed actions, and other hard boundaries. If an agent isn’t allowed to access customer PII, the control shouldn’t be a prompt telling it not to. The system should simply prevent that access.
Exercised governance is where judgment comes in: approvals, sampling, exceptions, escalations, and intervention when something looks wrong. This can include both human-in-the-loop (HITL) and human-on-the-loop (HOTL) approaches. Oversight agents can help in the middle by screening large volumes of work against defined criteria and surfacing the smaller set that actually needs a person.
What compounds
Every engineered workflow leaves something reusable behind: context, skills, connectors, or governance methods. The next workflow can then start from a stronger foundation instead of rebuilding everything from scratch. That’s where the operating model starts to compound. Each workflow adds to the shared system, and the feedback from real-world learning improves what comes next. The Agent Operating Model gets built incrementally—one value-add, engineered workflow at a time.
Questions GTM leaders are asking
What is an Agent Operating Model?
An Agent Operating Model defines how agent-enabled work actually runs inside an organization: how workflows are structured, how work is orchestrated, what specialist agents do, what context and skills they draw from, which tools they can act through, and how governance and human accountability operate across the system.
Where do humans sit in the Agent Operating Model?
Humans frame the system rather than occupying another technical layer inside it. Direction sits at the top: outcomes, constraints, policy, brand, taste and judgment. Verification sits at the other end: evidence review, exceptions, audits, work quality and decisions about whether the system has earned additional autonomy. Humans don’t need to approve every action. They do need to remain accountable for the operating domain and its outcomes.
Where does brand live in an agentic stack?
Brand belongs in governed context. Voice, tone, message architecture, approved claims, product truth, and other codified brand knowledge should be available to every authorized agent that needs them, rather than recreated inside individual creative tools. A vendor may maintain its own representation of brand context, but organizations should think carefully about allowing accumulated brand knowledge and judgment to become a proprietary artifact that only one platform can use.
What is an orchestrator, and do I need to buy one?
An orchestrator is a role before it’s a product. Something has to translate intent into a plan, decompose the work, coordinate agents and tools, sequence execution and hold run state. A suite may do that. A hyperscaler may do it. A domain platform may orchestrate one particular type of work. Or the organization may build its own. The strategic question is less “Do I need an orchestrator?” and more “Where should orchestration authority live, and what context, governance and lock-in come with that choice?”
What’s the difference between an agent and a skill?
An agent is an actor that reasons and performs work inside a bounded operating domain. A skill is a reusable method the agent can invoke. Your messaging framework is context. How to build a messaging framework is a skill. Keeping the distinction clear makes knowledge, methods and agents individually reusable rather than turning every agent into a large bundle of instructions and information.
Where does the CDP fit?
The capabilities historically packaged as a CDP are increasingly spreading across the architecture. Customer and account data are moving deeper into warehouse, lakehouse and enterprise-data platforms. Context engineering turns that data into something agents can actually use. Decisioning, activation and orchestration increasingly sit higher in the stack. A CDP as system-of-record may remain an important product in the implementation…just don’t treat “CDP” as its own architectural layer.
How much governance should be automated?
As much as can be deterministically enforced without pretending judgment is deterministic. Permissions, spending limits, data policies, allowed actions and bounded operating domains are good candidates for runtime enforcement. Criteria-based checks can often be performed or pre-screened by oversight agents. Direction, taste, trust, and consequential exceptions still require accountable human judgment. The objective isn’t maximum automation. It’s using human judgment where it actually adds value.
Do we need to build all of this before we deploy agents?
No. In practice, the Agent Operating Model should emerge from the work. Start with a workflow tied to a meaningful business outcome and build the minimum capabilities required to run it reliably. Then retain deliberately what the next workflow can reuse. That’s how early value and foundation-building stop being competing strategies. Each transformed workflow delivers something now — and makes the operating model underneath it stronger.
Sources:
Anthropic, Building Effective Agents, December 2024. The distinction between engineered workflows and autonomous agents, and the orchestrator-workers and evaluator-optimizer patterns. Anthropic source
Amazon Web Services, AWS Well-Architected Agentic AI Lens, June 10, 2026. Model selection and cost optimization as first-class architectural concerns; bounded autonomy; tiered human oversight matched to the risk and reversibility of each agent action. AWS source
Scott Brinker, Stacks on a Plane: Reshaping martech on a universal data layer, chiefmartec, March 19, 2026. Martech converging on a shared data and context substrate; context-as-a-service as the evolutionary path for martech platforms. chiefmartec source
Ian Kim, The Agentic Marketing Blueprint, iankim.ai, August 2026. A practitioner assembly combining a campaign backbone with orchestration, specialist agents and skills, context engineering, data, agent operations and governance. iankim.ai source
Boston Consulting Group, Making the Agentic Marketing Transformation a Reality, 2026. A four-layer agentic marketing architecture spanning data, a brand intelligence layer, the agentic layer, and a unified marketer experience; based on a survey of 300 global CMOs. BCG source
Omnicom and Adobe, AI Agentic Operating Model, announced at Adobe Summit, April 21, 2026. A productized operating model integrating Omnicom’s Omni platform and agentic framework with Adobe’s enterprise marketing and creative stack. Adobe source · Omnicom source
Databricks, State of AI Agents, January 2026. As of October 2025, 78% of companies were using two or more LLM model families and 59% were using three or more. Figures are platform telemetry from Databricks customers, not survey data. Databricks source






