Sub-Agent Delegation

How a main agent decomposes a task and consolidates sub-agent findings

Delegation pattern

  1. Main agent receives the task from Coordinator.
  2. Main agent breaks the task into smaller, domain-scoped tasks.
  3. Sub-agents work on their specific parts in parallel.
  4. Sub-agents return findings (finding, risk, evidence, tools, recommendation, confidence).
  5. Main agent consolidates a unified recommendation.
  6. Main agent escalates if approval or human review is required.

Worked example

Scenario: Security Review Case — customer requests a security posture assessment.
Main agent: IT-Security Agent

Sub-agent findings (parallel work)

Sub-agentTaskFindingRiskEvidenceToolsRecommendationConfidence
Identity & Access Sub-AgentIAM reviewPrivileged accounts lack MFA on 3 roles.HighIAM policy export; Role matrix diff
IAM policy scanner
Enforce MFA on all privileged roles within 14 days.92%
Cloud Security Sub-AgentCloud posture reviewPublic S3 bucket detected; KMS rotation disabled.HighCSPM scan id 4421
CSPM API
Block public access, enable KMS rotation.95%
Data Privacy Sub-AgentData handling reviewEU PII transits via US region without SCCs.HighData flow map; Region log
Data catalog API
Pin EU PII to EU region; add SCCs.88%
Compliance Sub-AgentCompliance checkPartial gaps vs ISO 27001 A.9 and A.13.MediumControl mapping v3
Compliance framework RAG
Open 6 control tickets; target close 30 days.90%

IT-Security Agent — consolidated recommendation

Overall risk: High
Key gaps
  • Privileged MFA missing
  • Public S3 + KMS rotation off
  • Cross-border PII without SCCs
  • ISO control gaps
Required controls
  • Enforce MFA on privileged roles
  • Block public S3, enable KMS rotation
  • Region-pin EU PII + add SCCs
  • Open ISO control remediation tickets
Approval required
Final recommendation: Approve security uplift plan with 4 mandatory controls; escalate to Human CISO for sign-off.