Designing RAG Assistants: What Knowledge They May (and May Not) Use

A Retrieval-Augmented Generation (RAG) assistant enhances assistance by combining a language model with a document retrieval layer. Effective design focuses on defining its mission, selecting appropriate knowledge domains, classifying content, and addressing uncertainty. A clear design sheet guides the process, ensuring responsible knowledge management and user support in various contexts.

Governing Agent Memory: State, Segmentation, and Reset

Adding memory to AI agents enhances their helpfulness but introduces governance challenges regarding what data is stored, its duration, visibility, and potential leaks. Effective memory management involves segmenting data by scope and sensitivity, establishing storage rules, enabling user control, limiting access, and ensuring proper reset mechanisms to mitigate risks of data misuse.

Designing Multi‑Agent AI Systems With Guardrails, Not Guesswork

Multi-agent systems impress with their ability to act autonomously but can pose risks without clear role definitions. A design charter outlines each agent's tasks, limitations, and escalation rules. By embedding constraints and ensuring oversight, designers can create effective systems that enhance IT support while preventing potentially harmful actions.

What Changes When AI Starts Acting: Agents Through DASUD

Organisations initially adopted AI for analytics and traditional machine learning, evolving to generative AI, and now to AI agents with autonomous capabilities. Governance must adapt to these systems, focusing on their design, acquisition, storage, use, and deletion. Effective stewardship and oversight of these semi-autonomous agents is crucial for operational success.

How to “Forget” in GenAI: Deletion, Retention, and Kill Switches

Generative AI complicates data deletion compared to traditional governance, as it involves multiple artefacts like logs and user memories. Organisations must define clear deletion policies for each artefact, including user-triggered options and emergency controls. Balancing auditability and privacy is crucial, necessitating regular reviews of retention policies for compliance and risk management.