ELAI S.r.l.

AI agents and duplicate operations: designing verifiable actions

What happens when an agent retries a request? Operation identity, uncertain outcomes and duplicate prevention.

AI agents and duplicate operations: designing verifiable actions

An AI agent's wrong answer can be corrected. An agent that records an order twice creates an operational problem even if its final text is perfect. Once models use tools that change data, quality must be measured through actual effects. One useful property is idempotency: repeating the same logical request must not multiply the operation.

Why an agent may repeat an action

Imagine an agent requesting a new case. The server creates it, but the response is lost before reaching the model. The agent sees an uncertain outcome. Blindly retrying could create a second case; not retrying could leave work apparently incomplete. Traditional distributed systems face this problem too, but a model introduces additional possibilities for reinterpreting the task.

Anthropic's engineering guide Writing effective tools for agents, published September 11, 2025, emphasizes clear tools and evaluations with verifiable outcomes. It reports the provider's engineering experience, not independent certification. The following choices are a design proposal for duplicate prevention, not measured results from an EL-AI installation.

Give the operation an identity

One design assigns a stable identifier to the business request. The agent can rephrase or retry, but the intention to open that particular case keeps its identity. The service records the identifier and outcome; an equivalent retry returns the existing result. This control belongs in the service writing the data. Merely telling the model not to duplicate actions does not provide the same guarantee.

Equivalence must also be checked. The same identifier with different data should not be accepted silently. The system should report a conflict and show the recorded state. Identifier retention must cover the possible retry window. A safeguard expiring before resumed work can allow the problem to return.

Separate proposal, authorization and outcome

Consider a hypothetical material movement. An agent can prepare a proposal identifying item, quantity, warehouse and project. The service checks applicable constraints and process authorization. Only the confirmed operation changes state. The response must distinguish a saved proposal, a recorded movement and a rejected operation. A generic “done” obscures what actually happened.

This separation does not require manual approval for every step. Authorization may already exist for certain action classes. The point is to enforce it in software consistently with role, context and current data. If a user authorizes a specific quantity, the agent should not independently convert that into a different operation with larger effects.

Check state when a response is missing

An outcome lookup tool can report what happened to a request. It should distinguish at least unknown, pending, completed and failed operations. If the outcome remains uncertain, the workflow can wait or leave reconciliation to a subsequent check. Claiming success because a request was sent confuses intent with effect. Claiming definitive failure after a timeout can be equally wrong.

The most informative tests interrupt communication at precise points: before insertion, after writing and before responding. They also test simultaneous attempts and resumption after a process stops. Success is observable in the business system: exactly one correct operation exists, associated with the intended request. The agent saying it handled the error is insufficient.

What this means for EL-AI and business processes

EL-AI presents ELAI Nexus as a platform connecting projects, materials, documents and approvals. These illustrate contexts where a future operational agent would need to respect system rules. We are not claiming Nexus already includes the described agent or mechanism. The connection clarifies that AI needs to fit into a reliable process rather than bypass it.

A first experiment should choose a limited, reversible action, define its identity and design outcome verification. Only then does expanding the available tools make sense. Conversational ability remains useful, but operational value emerges when every action can be traced to a request and verified in the application's actual state.

Article prepared with AI assistance and verification of the cited sources. Application examples are hypothetical unless stated otherwise. Sources consulted on September 20, 2026.

Illustrative AI-generated cover; it does not depict actual EL-AI people, premises or installations.