A German Mittelstand machinery supplier built its first AI agent in spring and it worked. The agent read inbound customer emails, found the order in SAP, checked stock, and drafted a reply. Three months later the same agent was a mess. The team had asked it to also check credit limits, also read the contract for delivery terms, also loop in production planning when a date slipped, also draft the dunning note when the customer paid late. One prompt was now carrying the work of four departments. It hallucinated a delivery date, promised a discount that did not exist, and nobody could tell which part of the prompt caused it.
That is the moment most companies meet the real question. Not “should we use AI agents” - they already are - but “what do we do when one agent has too much to hold”. The answer is not a bigger prompt. It is composition: an orchestrator agent that owns the goal and the audit trail, plus specialist agents that each do one thing well, with clean handoffs, shared memory, guardrails, and a human at the decisions that matter.
This article is about that composition. When a single agent stops being enough, how the Mittelstand actually wires up orchestration for real cross-department work, what it costs, where it fails, whether to build or buy, and a 90-day path that does not bet the company on the first attempt.
TL;DR
A single agent is the right default. For most Mittelstand workflows - one department, one or two systems, a predictable path - a single well-built agent wins on cost, speed, and reliability. Reach for orchestration only when the work genuinely outgrows it.
Orchestration means an orchestrator plus specialists. One agent owns the goal, the routing, and the audit trail. Specialist agents each handle one job with their own tools and least-privilege scope. The orchestrator decides who runs, in what order, and when a human signs off.
Five building blocks make it work: handoffs (passing the right slice of context), shared memory (short-term state plus long-term knowledge), guardrails (input, output, and action limits), human-in-the-loop checkpoints, and observability (knowing what every agent did and why).
It costs more. Multi-agent systems use roughly 15 times the tokens of a chat and 2 to 5 times the cost of an equivalent single agent.1 The trade only pays when parallelism, specialisation, or quality gates create value above the overhead.
The failure mode is coordination, not the model. The leading cause of multi-agent failure is agents producing locally-correct but globally-incompatible outputs.3 Gartner expects over 40 percent of agentic AI projects to be cancelled by end of 2027, mostly from cost, unclear value, and weak controls.4 Design the coordination, not just the agents.
When One Agent Stops Being Enough
The instinct when an agent works is to give it more. More tools, more context, more responsibilities. That instinct is correct right up to the point where it quietly stops being correct - and most teams cross that line without noticing. The signal is not a crash. It is a slow drift: answers get vaguer, errors get harder to trace, and the prompt grows into something nobody fully understands.
The five signals that you have outgrown a single agent
- The work crosses departments - The task now needs sales context, finance rules, and production data at once. Each department has different data, different authority, and a different person who signs off. One prompt cannot hold three sets of rules cleanly.
- The context window is doing too much - When a single prompt has to carry the full email thread, the contract, the price list, the customer history, and five tool definitions, quality drops. Anthropic found that token usage alone explains 80 percent of the performance variance on complex tasks1 - and one agent overloads its budget fast.
- Steps want to run in parallel - Vetting five suppliers, scanning four markets, reviewing a document from three angles. A single agent does these in sequence and feels slow. Specialists running in parallel finish in a fraction of the time.
- Different parts need different expertise - Legal review, financial review, and technical review each need their own knowledge, their own sources, and their own tone. Cramming all three into one persona produces a generalist that is mediocre at each.
- One failure point blocks everything - When the single agent stalls on one hard sub-task, the entire workflow stops. Splitting the work means a specialist can fail, escalate, or retry without taking the whole flow down.
The honest counter-signal
If your work is one department, one or two systems, and a path that looks the same most of the time, you have not outgrown a single agent - and orchestration will cost you more for less. The fastest way to waste a year is to build a multi-agent platform for a problem that a single agent with three good tools would have solved in eight weeks. Outgrowing a single agent is a specific event with specific signals, not a milestone you are supposed to reach.
Why the German Mittelstand hits this earlier than it expects
Mittelstand work is unusually cross-departmental by nature. The order desk talks to production, production talks to procurement, procurement talks to finance, and the whole chain answers to one customer relationship. That structure means a useful agent reaches a department boundary quickly.
- Lean teams wear many hats - The same person handles the order, the credit check, and the customer call. An agent that helps them genuinely needs to span those jobs, which pushes it toward the multi-department wall fast.
- Data lives in many systems - SAP or a Mittelstand ERP, DATEV, a CRM, SharePoint, shared mailboxes, Excel sheets a controller maintains. Cross-system work is the norm, not the exception.
- Adoption is accelerating - Bitkom reports 41 percent of German firms now actively use AI, up sharply year on year, with AI agents among the three fastest-growing areas though still early at roughly 10 percent.11 Companies are moving from first agent to second and third quickly.
- Audit and co-determination raise the bar - GoBD, DSGVO, and Betriebsrat rights mean cross-department automation needs a clear owner of the audit trail. That favours an explicit orchestrator over a tangle of agents calling each other.
- The skills gap is real - Few Mittelstand IT teams have multi-agent experience in-house. The architecture has to fit a small team, which is exactly why disciplined orchestration beats ad-hoc agent sprawl.
What Orchestration Actually Means
Multi-agent orchestration is the coordination of several AI agents so they work toward one goal, where each agent handles a specific job and an orchestrator manages sequencing, routes information between agents, resolves conflicts, enforces policy, and assembles the result.6 It is not many chatbots in a row. It is one system with a clear conductor.
The cast of an orchestrated system
- The orchestrator - Owns the goal and the plan. Decides which specialist runs, in what order, and when to loop back. Holds shared memory, enforces the cross-cutting guardrails, and owns the audit trail. The single accountable component.
- Specialist agents - Each does one job well: read documents, query the ERP, draft a reply, check compliance, normalise supplier quotes. Each has its own tools, its own prompt, and its own least-privilege scope on data.
- Shared memory - The layer that lets agents work on the same case without each carrying the whole history. Short-term state passes between agents; long-term knowledge is retrieved when relevant.
- The tool and data layer - The APIs, retrieval systems, and connectors specialists call. In the Mittelstand this is SAP, DATEV, CRM, DMS, email, and increasingly Model Context Protocol servers.13
- The human checkpoint - The defined points where a person reviews and approves before the system commits anything with real consequence.
“Multi-agent systems work mainly because they help spend enough tokens to solve the problem.”
- Anthropic Engineering, How We Built Our Multi-Agent Research System1
Orchestration is not the same as a workflow
The most expensive confusion in this space is treating orchestration and a fixed workflow as the same thing. They are not, and the difference decides your cost and reliability.
| Dimension | Deterministic workflow | Agent orchestration |
|---|---|---|
| Path | Same steps, same order, every time | Orchestrator chooses the path per case |
| Best when | The process is stable and predictable | The right path changes case by case |
| Cost | Low and predictable | Higher; scales with agents and handoffs |
| Auditability | Trivial - the path is fixed | Needs deliberate logging of every decision |
| Failure handling | Stops or routes to a queue | Orchestrator can retry, reroute, or escalate |
| Engineering effort | Moderate | 2 to 5 times higher |
The pragmatic rule
If the path is always the same, build a deterministic pipeline with a small agent inside each step. It is cheaper, easier to audit, and almost always more reliable. Reserve full orchestration for the workflows where the path genuinely changes based on what the system finds - those are the cases where an orchestrator earns its overhead. Many “multi-agent” projects are really workflows that were over-engineered into agents.
The Five Building Blocks
Every production orchestration rests on five building blocks. Skip any one and the system either leaks data, loses context, or becomes impossible to trust. These are not optional extras; they are the difference between a demo and a deployment.
Block 1: Handoffs - passing the right slice of context
A handoff is how one agent passes work to the next. The mistake is passing everything; the discipline is passing exactly the slice the next agent needs, through a defined schema.9
- Shared scratchpad - Every agent reads the full history. Simple to build, but it bloats token cost and leaks context across roles that should not see it. Fine for a prototype, risky in production.
- Schema-based handoff - The orchestrator passes a defined, minimal payload to the next agent: the case ID, the relevant facts, the decision needed. Cleaner, cheaper, and the pattern most production systems settle on.
- Tool-calling handoff - The orchestrator treats each specialist as a callable function with typed inputs and outputs. Tight control and easy to test, at the cost of more upfront engineering.
Block 2: Shared memory - short-term state and long-term knowledge
Shared memory lets agents work on one case without each carrying the entire conversation. It has two distinct layers that solve different problems.
- Short-term state - The current case, held as structured data and passed between agents in a defined schema. This is what keeps a four-agent flow coherent.
- Long-term knowledge - Company documents, past cases, customer history, policies. Agents retrieve the relevant pieces when needed rather than holding everything in context.
- The schema is the contract - When agents agree on the shape of the data they exchange, locally-correct outputs stop becoming globally-incompatible. The shared-memory schema is the single most effective defence against coordination failure.
Block 3: Guardrails - input, output, and action limits
- Input guardrails - Screen what enters the system. Block prompt injection from inbound emails, redact data an agent should not handle, reject malformed requests.
- Output guardrails - Check what leaves it. No unapproved commitments, no personal data in outbound text, no figures that contradict the system of record.
- Action guardrails - Bound what each agent can do. Least-privilege scopes on tools and data, value limits on transactions, hard stops above defined thresholds. No specialist gets a shared super-account.
Block 4: Human-in-the-loop checkpoints
- Threshold-based review - Anything above a value or risk limit goes to a person before it commits.
- External-commitment review - Anything that binds the company - a price, a contract clause, a customer promise - requires sign-off.
- Confidence-based review - When agents flag a case as low-confidence, they escalate with full context and a recommendation rather than guessing.
Block 5: Observability - knowing what every agent did
- Per-agent traces - Capture each agent’s inputs, tool calls, outputs, and token spend on every run. Without this you cannot debug a coordination failure.
- End-to-end audit trail - One record of the full case across all agents, owned by the orchestrator. Essential for GoBD, DSGVO, and EU AI Act Article 12 logging duties.
- An eval harness - A set of 50 to 200 reproducible scenarios that score end-to-end outcomes plus per-agent contributions, so you can tell whether a change made the system better or worse.
The building block most teams skip
Observability and the eval harness are the blocks teams cut to ship faster - and they are exactly the blocks that decide whether the system survives contact with production. Without traces you cannot find the coordination failure. Without an eval harness you cannot tell if your fix helped or hurt. A multi-agent system you cannot measure is a multi-agent system you cannot trust.
Cross-Department Work in Practice
The point of orchestration is not elegance. It is getting real cross-department work done without a human stitching three systems together by hand. Here is what that looks like in concrete Mittelstand workflows, each one a case where a single agent genuinely would not have been enough.
Order-to-cash across sales, finance, and production
- The trigger - A customer emails a changed order: new quantity, new delivery date, a new ship-to mentioned in passing.
- The orchestrator - Reads the email, identifies the case, and plans which specialists to call.
- Specialist 1 (sales data) - Finds the order and customer in the CRM and ERP, confirms the ship-to against the master data.
- Specialist 2 (finance) - Checks the credit limit and open receivables, flags if the new quantity pushes the customer over the line.
- Specialist 3 (production) - Checks the new date against capacity and material availability.
- The orchestrator again - Synthesises the three results, drafts the customer reply, and either books the change within authority or escalates to the order desk with everything attached.
Supplier onboarding across procurement, compliance, and finance
- Parallel specialists - One agent reads the supplier’s documents, one checks the Handelsregister and VAT ID, one screens against sanctions and compliance lists, one drafts the master-data entry. They run at the same time.
- The orchestrator - Collects the four results, resolves conflicts (the address on the document does not match the register), and produces one onboarding recommendation.
- The human checkpoint - A buyer reviews the recommendation, not four raw document piles.
Quote and tender response across sales, technical, and legal
- Technical specialist - Reads the tender spec, maps it to the product catalogue, flags gaps.
- Pricing specialist - Builds the price from the cost model and the customer’s history.
- Legal specialist - Reviews the tender’s terms against the company’s standard clauses and flags the risky ones.
- The orchestrator - Assembles a draft response and a risk summary for the sales lead to approve. Nothing goes out without sign-off.
Where a single agent is still the right answer
- Inbox triage - Classify and route inbound email. One department, one job. Single agent.
- Invoice data extraction - Read a PDF, extract fields, post within tolerance. Deterministic pipeline with one agent inside.
- Internal Q&A over documents - Answer staff questions from the knowledge base. One retrieval agent, no orchestration needed.
- Single-system updates - Update a record in the CRM from a structured request. A workflow, not a multi-agent system.
| Workflow | Departments touched | Right architecture |
|---|---|---|
| Inbox triage and routing | One | Single agent |
| Invoice extraction and posting | One | Deterministic pipeline, one agent inside |
| Order change handling | Sales, finance, production | Orchestrator + specialists |
| Supplier onboarding | Procurement, compliance, finance | Orchestrator + parallel specialists |
| Tender response | Sales, technical, legal | Orchestrator + specialists + human sign-off |
| Knowledge-base Q&A | One | Single retrieval agent |
Not sure whether your workflow needs orchestration or just a better single agent?
Book a 30-minute call. We will map one real cross-department workflow and tell you straight which architecture fits - and what it would cost to run.

Five Orchestration Patterns
Most production orchestration is a combination of five named patterns. Knowing them by name turns “we have a bunch of agents” into a design you can reason about, cost, and audit.
Pattern 1: Orchestrator-worker
- What it is - A lead agent plans the work and delegates sub-tasks to worker specialists, then synthesises the result. The most common production pattern.1
- Best for - Cross-department work where the orchestrator needs to decide which specialists to involve per case.
- Watch out for - The orchestrator becoming a bottleneck. Keep its job to planning and synthesis, not doing the specialists’ work.
Pattern 2: Parallel fan-out
- What it is - The orchestrator runs several specialists at once on independent sub-tasks, then merges the results.
- Best for - Supplier vetting, market scans, multi-angle document review - anything genuinely parallelisable.
- Watch out for - Cost. Parallelism multiplies token spend; only fan out when speed has real value.
Pattern 3: Sequential pipeline with quality gates
- What it is - Specialists run in a fixed order - draft, then review, then compliance check, then publish - with a gate between each step.
- Best for - Document generation and any output that needs separation of concerns and a quality check before it ships.
- Watch out for - Over-using it. If the order never changes, this is really a workflow with small agents inside, which is fine and cheaper.
Pattern 4: Expert routing
- What it is - A router agent classifies the case and hands it to the right specialist - legal to legal, technical to technical.
- Best for - Service inboxes and request triage where each case type needs a different expert.
- Watch out for - Misrouting. Use a small, fast model for routing and measure routing accuracy separately.
Pattern 5: Critic loop
- What it is - A worker produces output and a critic agent reviews it against criteria, looping until it passes or escalating.
- Best for - High-stakes drafts where quality matters more than latency.
- Watch out for - Infinite loops. Cap the iterations and escalate to a human when the cap is hit.
| Pattern | Coordination shape | Relative cost | Typical use |
|---|---|---|---|
| Orchestrator-worker | Central planner delegates | Medium-high | Cross-department case handling |
| Parallel fan-out | Many specialists at once | High | Vetting, scans, multi-angle review |
| Sequential pipeline | Fixed order with gates | Low-medium | Document generation |
| Expert routing | Classify then dispatch | Low | Service triage |
| Critic loop | Produce then review | Medium | High-stakes drafts |
“Some domains that require all agents to share the same context or involve many dependencies between agents are not a good fit” for multi-agent architectures.
- Anthropic Engineering, How We Built Our Multi-Agent Research System1
Guardrails and Human-in-the-Loop
In a single agent, governance is one boundary. In an orchestrated system, every agent is a boundary - and the orchestrator has to enforce the rules that cut across all of them. This is where most of the EU AI Act and DSGVO work actually lands.
How to scope each agent
- Least privilege per agent - The finance specialist sees finance data and finance tools, nothing more. No agent gets a shared super-account that can touch everything.
- The orchestrator holds the broad scope - It can read across systems to plan, but it delegates narrow scopes to specialists for the actual work.
- Tool allow-lists - Each agent has an explicit list of tools it may call. Anything off the list is refused, not improvised.
- Value and risk thresholds - Hard limits on what any agent can commit without a human. A draft is free; a binding action above a threshold is not.
Where humans must stay
- External commitments - Prices, contract terms, delivery promises. The agent drafts; a person commits.
- High-value transactions - Payments, credit releases, large orders above a defined limit.
- Low-confidence cases - When the system is unsure, it escalates with context rather than guessing.
- Anything touching employees - HR data, performance signals, anything in Betriebsrat territory needs human ownership and prior consultation.
Why orchestration helps compliance, not just complicates it
A single orchestrator that owns the audit trail is easier to govern than a flat tangle of agents calling each other. The orchestrator is the one place to enforce cross-cutting guardrails, log every decision, and prove human oversight under EU AI Act Article 14. Document each agent role, prompt, and tool surface as a discrete item in your technical documentation, and the murky attribution that makes multi-agent compliance hard becomes a clean, named list.
The compliance checklist for orchestrated systems
Before any orchestrated workflow touches production
- Each agent has a documented role, prompt, and tool allow-list
- Each agent runs on a least-privilege data and tool scope
- The orchestrator owns a complete end-to-end audit trail
- Value and risk thresholds for human review are defined and enforced
- Input and output guardrails are in place (injection, PII, commitments)
- EU AI Act risk class verified for the decisions the system produces
- DSGVO basis documented; data stays in the defined perimeter
- Betriebsrat consulted where the system touches employee data
- Rollback and kill-switch procedures documented and tested
The Honest Cost Math
Orchestration is more expensive than a single agent in every dimension - tokens, engineering, and operating overhead. The question is never “is it cheap”; it is “does the value clear the overhead”. Pretending otherwise is how projects get cancelled.
Where the extra cost comes from
- Token multiplier - Anthropic reports single agents use about 4 times the tokens of a chat, and multi-agent systems about 15 times.1 Production orchestrator-worker setups commonly run 2 to 5 times the inference cost of an equivalent single agent.
- Engineering effort - Building, testing, and maintaining coordination is 2 to 5 times the effort of a single agent. The agents are the easy part; the handoffs, eval harness, and observability are the work.
- Latency - Each handoff adds time. A many-step flow can take 30 to 90 seconds. Internal back-office work tolerates this; customer-facing chat does not.
- Observability stack - You need tracing, an eval harness, and monitoring you may not have today. Real cost, real time, non-optional.
- Ongoing tuning - Plan for 0.2 to 0.5 FTE per active orchestrated workflow for review, correction, and improvement.
Where the value comes from
- Parallelism - Work that took a person a day of stitching systems finishes in minutes when specialists run at once.
- Specialisation - Each specialist is better at its job than one overloaded generalist, so quality rises and rework falls.
- Quality gates - A critic or compliance step catches errors before they reach a customer or the books.
- Throughput on cross-department work - The category of work that previously needed a coordinator is the category orchestration is built for.
| Cost component | Single agent | Orchestrated workflow |
|---|---|---|
| Inference (relative) | 1x baseline | 2-5x baseline |
| Build effort | 1x baseline | 2-5x baseline |
| Time to production | 6-10 weeks | 12-20 weeks |
| Observability needed | Basic logging | Per-agent traces + eval harness |
| Ongoing tuning | 0.1-0.2 FTE | 0.2-0.5 FTE per workflow |
| Pays off when | One department, one path | Cross-department, variable path, high value |
The cost test in one sentence
If a single agent or a deterministic pipeline can do the job at acceptable quality, the orchestration overhead is pure waste - so orchestrate only the few workflows where the cross-department value clearly exceeds the 2 to 5 times cost, and leave the long tail of simple tasks to single agents.
“Most agentic AI projects right now are early stage experiments or proof of concepts that are mostly driven by hype and are often misapplied.”
- Anushree Verma, Senior Director Analyst at Gartner4
Build vs Buy
Orchestration is where build-versus-buy gets serious, because the hard part is not the agents - it is the coordination layer, the eval harness, and the observability that production demands. Three honest paths exist, each with real trade-offs.
The three paths
- Build in-house on a framework - Use LangGraph, the OpenAI Agents SDK, Microsoft Agent Framework, or similar to build your own.810 Maximum control and ownership, but you carry the architecture, evaluation, observability, and compliance work yourself.
- Buy a platform - Adopt a vendor orchestration platform. Faster to start, but you fit your process to the platform’s model and accept its lock-in and pricing.
- Partner-built, owned by you - A partner builds the first workflows with you - architecture, eval harness, observability, compliance - and hands over the operating model. You learn on a real workflow without paying the full first-attempt tax.
| Factor | Build in-house | Buy a platform | Partner-built |
|---|---|---|---|
| Time to first workflow | Long - learning curve included | Fast - if your process fits | Fast - 12-20 weeks |
| Control over architecture | Full | Limited to platform model | Full - you own the result |
| Lock-in risk | Low | High | Low |
| Eval and observability | You build it | Vendor-provided, opaque | Built with you, you keep it |
| In-house skill needed | High from day one | Moderate | Grows over the project |
| First-attempt cost risk | Highest | Medium | Lowest |
Build in-house when
- You already have multi-agent and eval experience on staff
- Orchestration is core to your product, not just internal ops
- You can afford a slow, expensive first workflow as a learning investment
- Long-term ownership matters more than time to value
Partner-build when
- You do not yet have the in-house orchestration expertise
- You want the first workflow live in a quarter, not a year
- You want to own the result and absorb the operating model
- Compliance and audit have to be right the first time
“Over 40 percent of agentic AI projects will be cancelled by end of 2027, due to escalating costs, unclear business value, or inadequate risk controls.”
- Gartner, Press Release on Agentic AI Project Outcomes4
How Superkind Fits
Superkind builds custom AI agents that live inside existing Mittelstand systems - SAP, DATEV, CRM, DMS, email - and we start single-agent on purpose. We add orchestration only when a workflow genuinely outgrows one agent, and when it does, we build the coordination layer that makes it safe to run.
Core capabilities for orchestrated workflows
- Single-agent first - We deploy the smallest architecture that solves the problem. Most workflows ship as one agent; we do not sell orchestration you do not need.
- Orchestrator + specialists when warranted - For genuine cross-department work, we build an orchestrator that owns the goal and audit trail, plus specialists with least-privilege scopes.
- Schema-based handoffs - Agents exchange defined, minimal payloads, so locally-correct outputs stay globally compatible. This is our main defence against coordination failure.
- Shared memory over your systems - Short-term case state plus long-term retrieval from your ERP, DMS, and document stores. The agents work from your reality, not the internet.
- Guardrails at every boundary - Input, output, and action guardrails, with value and risk thresholds you define for human review.
- Human-in-the-loop by design - You set which decisions need approval and at what confidence. Agents escalate with context rather than acting silently.
- Audit trail and observability - The orchestrator logs every decision across every agent, aligned with GoBD and EU AI Act Article 12, with per-agent traces for debugging.
- Eval harness built with you - Reproducible scenarios that score end-to-end outcomes and per-agent contributions, so you can tell whether a change helped.
- EU deployment and DSGVO alignment - Workflows run on EU infrastructure or your own. Data stays in your defined perimeter.
- You own the result - We hand over the architecture and the operating model. No black-box lock-in.
- 12 to 20 weeks to first orchestrated workflow - From scoping and single-agent baseline to a live, audited cross-department workflow.
Superkind vs the alternatives
| Factor | Superkind | Generic platform | Pure in-house build |
|---|---|---|---|
| Starts single-agent | Yes, by default | Often pushes multi-agent | Depends on the team |
| Cross-system reasoning | Native (SAP, DATEV, CRM, DMS) | Connector-dependent | If built |
| Eval harness and observability | Built with you, you keep it | Vendor-provided, opaque | You build it |
| EU / DSGVO alignment | Built-in, EU deployment | Varies by vendor | Your responsibility |
| Lock-in risk | Low - you own it | High | None |
| Time to first workflow | 12-20 weeks | Fast if process fits | 6-18 months |
When Superkind Fits
- You have a real cross-department workflow a single agent cannot hold
- The work spans SAP, DATEV, CRM, DMS, or email
- You need audit, DSGVO, and human-in-the-loop done right
- You want to own the result, not rent a black box
- You want a first workflow live in a quarter
When Superkind Is Not the Right Fit
- Your workflow is one department and one path - a single agent is enough
- The work is too low-volume to justify any agent build
- Your underlying process is broken - fix the process first
- Your data is too poor for agents to reason reliably
- The team will not engage in process mapping and feedback
The Decision Framework
Use this framework workflow by workflow to decide whether to ship a single agent, a deterministic pipeline, or full orchestration. The output is a defensible recommendation you can put in front of operations leadership and IT in one meeting.
Step 1: Count the departments
- One department - Single agent or pipeline. Stop here unless another signal fires.
- Two or more departments with different rules and sign-offs - Orchestration is on the table.
Step 2: Test the path
- Same path every time - Deterministic pipeline with small agents inside. Cheaper and easier to audit.
- Path changes case by case - An orchestrator that chooses the path earns its keep.
Step 3: Check for parallelism and specialisation
- Sub-tasks are independent and speed matters - Parallel fan-out adds real value.
- Sub-tasks need genuinely different expertise - Specialists beat one overloaded generalist.
Step 4: Weigh the value against the overhead
- High value, high volume - The 2 to 5 times overhead is justified.
- Low value or low volume - Overhead never amortises. Stay single-agent.
Step 5: Read the matrix
| Departments | Path | Value / volume | Recommendation |
|---|---|---|---|
| One | Fixed | Any | Single agent or pipeline |
| One | Variable | Any | Single agent with good tools |
| Two or more | Fixed | Any | Pipeline with small agents |
| Two or more | Variable | Low | Single agent; revisit later |
| Two or more | Variable | High | Orchestrator + specialists |
| Two or more | Parallelisable | High | Orchestrator + parallel fan-out |
Five questions before you orchestrate
- Does the workflow genuinely cross two or more departments?
- Does the right path change case by case, or is it always the same?
- Is there real parallelism or genuinely different expertise to exploit?
- Does the value clearly exceed the 2 to 5 times overhead?
- Can you afford the eval harness and observability orchestration needs?
Five yes answers means orchestration will likely pay off. Two or fewer means a single agent or a pipeline is the better build.
The 90-Day Path
This path takes one real cross-department workflow from selection to a live, audited, limited-scope deployment in a quarter - without betting the company on the first attempt. The discipline is to prove the single-agent baseline before you orchestrate.
Weeks 1 to 4: Scope and single-agent baseline
- Pick one workflow with measurable pain - Cross-department, high value, clear current cost in hours or errors. Document the baseline in numbers.
- Run the decision framework - Confirm it genuinely needs orchestration and is not a single-agent job in disguise.
- Build the single-agent baseline first - Even if you expect to orchestrate, build one agent and measure it. It sets the bar orchestration must clear.
- Map the departments, data, and sign-offs - Which systems, which rules, which person commits at each decision point.
- Define success metrics - Hours recovered, cycle time, error rate, escalation rate. Measurable in 90 days.
Weeks 5 to 12: Build the orchestration and the eval harness
- Design the orchestrator and specialists - Roles, prompts, tool allow-lists, least-privilege scopes. One accountable orchestrator.
- Define the shared-memory schema - The contract every agent exchanges. This is your main defence against coordination failure.
- Build the eval harness - 50 to 200 reproducible scenarios scoring end-to-end and per-agent results. Build it before you tune anything.
- Wire in guardrails and human checkpoints - Input, output, and action limits; thresholds for human review.
- Test against real historical cases - Run the system on resolved cases and compare to what humans actually decided.
Weeks 13 to 20: Productionise and roll out
- Stand up observability - Per-agent traces, end-to-end audit trail, monitoring. Confirm GoBD and Article 12 logging.
- Deploy to limited scope - One segment or business unit, 20 percent of cases, in parallel with the current process.
- Review every escalation weekly - What did the system get wrong, why, and what is the correct answer.
- Measure against the single-agent baseline - If orchestration is not clearly beating the baseline, diagnose before scaling.
- Expand only once metrics validate - Two to three weeks of stable limited-scope operation before full volume.
Go/No-Go before production expansion
- Orchestrated system clearly beats the single-agent baseline on the metrics
- Coordination failures are rare and traceable
- Escalation rate at or below target
- Every agent runs least-privilege; the orchestrator owns the audit trail
- Guardrails and human checkpoints firing correctly
- GoBD, DSGVO, and EU AI Act documentation complete
- Betriebsrat sign-off obtained where required
- Eval harness in place and rollback tested
- Team comfortable reviewing agent recommendations
Related Articles
- Multi-Agent Systems for the Mittelstand: When More Agents Help and When They Hurt
- Human-in-the-Loop AI: How the Mittelstand Keeps People in Control of Agents
- AI Agent Memory: How Agents Remember Context, Cases, and Company Knowledge
- AI Agent Identity and Access: Giving Agents the Right Permissions in the Mittelstand
- ERP or AI Agent: Where the Boundary Runs Through Mittelstand Operations
- RPA vs AI Agents: What German SMEs Get Wrong About Automation
- What AI Agents Actually Cost in the Mittelstand
Frequently Asked Questions
A multi-agent system splits a piece of work across two or more AI agents, each with its own role, tools, and bounded authority, coordinated so they deliver one outcome together. In a company, that usually means an orchestrator agent that owns the goal and the audit trail, plus specialist agents that each handle one part - reading documents, querying the ERP, drafting a reply, checking compliance. The orchestrator routes work between them, resolves conflicts, and decides when a human has to sign off. It is one architecture choice among several, not a default.
A single agent stops being enough when the work crosses departments with different data, different rules, and different sign-off owners, or when one prompt has to hold so much context that quality drops. The clearest signals: the task touches three or more systems, different parts need different specialist knowledge, steps must run in parallel to be fast enough, and a single failure point would block the whole flow. If the work is one department, one system, and a predictable sequence, a single well-built agent almost always wins on cost and reliability.
A fixed workflow runs the same steps in the same order every time - it is deterministic and easy to audit, but brittle when reality varies. A multi-agent system lets an orchestrator decide which specialist to call, in what order, and when to loop back, based on what it finds. The practical rule: if the path is always the same, a deterministic pipeline with a small agent inside each step is cheaper and more reliable. Use full orchestration only when the path genuinely changes case by case.
Three mechanisms dominate. A shared scratchpad lets every agent read the full history - simple, but it bloats token cost and leaks data across roles. A handoff passes only the relevant slice of context to the next agent through a defined schema - cleaner and cheaper, and the pattern most production systems settle on. Tool-calling treats each agent as a callable function the orchestrator invokes - tight control, more engineering. Most Mittelstand setups use schema-based handoffs with the orchestrator holding shared memory, so each specialist gets exactly what it needs and nothing it should not see.
Shared memory is the layer that lets agents work on the same case without each one carrying the entire conversation. It splits into short-term state (the current case, passed as structured data between agents) and long-term memory (company knowledge, past cases, customer history the agents retrieve when relevant). It matters because the leading cause of multi-agent failure is agents producing locally-correct but globally-incompatible outputs - one agent does its job perfectly, but its result does not fit what the next agent needs. A defined shared-memory schema is how you prevent that.
Yes, materially. Anthropic reports that single agents typically use about 4 times the tokens of a chat interaction, and multi-agent systems use about 15 times. Production multipliers for orchestrator-worker setups commonly land at 2 to 5 times the cost of an equivalent single agent. The trade only pays off when parallelism, specialisation, or quality gates create value that exceeds the overhead. For most Mittelstand back-office work that means a few high-value, cross-department workflows are worth orchestrating, and the long tail of simple tasks is not.
Guardrails are validation and policy checks placed at the edges of agent actions. Input guardrails screen what enters the system (block prompt injection, redact data the agent should not handle). Output guardrails check what leaves it (no unapproved commitments, no PII in outbound text, no posting above a value threshold). Action guardrails bound what each agent can do - least-privilege scopes on tools and data, value limits on transactions, mandatory human approval above defined thresholds. In orchestration the orchestrator enforces the cross-cutting guardrails so no single specialist can act outside policy.
At the decisions that carry real consequence: anything above a value or risk threshold, anything that commits the company externally (a price, a contract clause, a customer promise), and any case the agents flag as low-confidence. The practical pattern is that agents do the reading, reasoning, and drafting, then escalate to a human with the full context, the options considered, and a recommendation. The human reviews the analysis rather than the raw case, which is typically 5 to 10 times faster than handling the exception from scratch.
The legal classification follows the system as a whole and the risk class of the decisions it produces, not the number of agents. Most cross-department operations agents land in the limited-risk or minimal-risk categories under the EU AI Act, which becomes broadly applicable in August 2026. High-risk obligations kick in for AI used in employment, creditworthiness, or biometric decisions. Article 13 transparency, Article 14 human oversight, and Article 15 accuracy duties get harder to satisfy with many agents because attribution is murkier - which is exactly why a single orchestrator that owns the audit trail and documents each agent role, prompt, and tool surface is the pragmatic design.
Most Mittelstand companies do not yet have in-house multi-agent expertise, the eval harness, or the observability stack that production orchestration needs. The pattern that works is to ship the first one or two cross-department workflows with a partner who handles the architecture, the evaluation harness, and the monitoring, then absorb the operating model in-house from there. Learning multi-agent design on a live production workflow without a partner is the most expensive way to learn it. A full in-house platform with memory, orchestration, and compliance controls runs well into six figures before the first workflow ships.
A focused orchestrated deployment runs 12 to 20 weeks from first design to first production workflow. Roughly the first 4 weeks are scoping and a single-agent baseline, weeks 5 to 12 build the orchestrator and specialists plus the eval harness, and weeks 13 to 20 productionise observability, guardrails, human-in-the-loop checkpoints, and the limited-scope rollout. That is about twice the timeline of a comparable single-agent deployment - the extra time goes into coordination, evaluation, and audit, not into the agents themselves.
Coordination failures. A 2025 academic study cataloguing multi-agent failures found the leading cause is agents producing locally-correct but globally-incompatible outputs, and that single agents reach about 99.5 percent success on equivalent benchmarks while naive multi-agent equivalents drop to around 97 percent because of these gaps. The other recurring failures are scope creep (orchestrating work that never needed it), missing evaluation (no way to tell if the system got better or worse), and weak guardrails (an agent acting outside its authority). All three are design problems, not model problems.
Sources
- Anthropic Engineering - How We Built Our Multi-Agent Research System
- Anthropic Research - Building Effective Agents
- arXiv - Why Do Multi-Agent LLM Systems Fail? (Cemri, Pan, Yang et al., 2025)
- Gartner - Over 40% of Agentic AI Projects Will Be Cancelled by End of 2027
- Gartner - 40% of Enterprise Apps Will Feature Task-Specific AI Agents by 2026
- McKinsey QuantumBlack - Seizing the Agentic AI Advantage
- McKinsey QuantumBlack - How We Enabled Agents at Scale With the Agentic AI Mesh
- Microsoft - The Future of Agentic AI: Inside Microsoft Agent Framework 1.0
- OpenAI - Agents SDK and the Handoff Pattern
- LangChain - LangGraph Documentation and Production Patterns
- Bitkom - Künstliche Intelligenz in Deutschland (Studienbericht 2025/2026)
- European Commission - EU AI Act Official Text
- Anthropic - Model Context Protocol Documentation
- Harvard Business Review - Why Agentic AI Projects Fail and How to Set Yours Up for Success
Ready to find out whether your workflow needs orchestration?
Book a 30-minute call. We will take one real cross-department workflow, map it against the decision framework, and tell you straight whether a single agent, a pipeline, or full orchestration is the right build - no sales pitch, just a frank assessment.
Book a Demo →
