Main agents own the outcome. Sub-agents are scoped specialists that report findings back to their main agent. Most sub-agents cannot escalate directly — the main agent consolidates and decides whether to escalate further.
Pre-Sales Agent — 5 sub-agents
Solution architect and proposal lead| Sub-agent | Responsibility | Tools | Delegation trigger | Reports back | Escalation |
|---|---|---|---|---|---|
| Software Pre-Sales Sub-Agent | Application, integration, APIs, custom software and platform solutioning. | Solution templates RAGAPI catalogue RAGReference architecture DB | Task mentions custom app, integration, API or platform build. | Returns structured finding to Pre-Sales Agent for consolidation. | Reports to main only Reports only to Pre-Sales Agent; Pre-Sales escalates further if needed. |
| Cisco Pre-Sales Sub-Agent | Cisco networking, collaboration, security and Cisco architecture requirements. | Cisco product catalogue RAGCisco BoM generatorPartner pricing API | Task involves Cisco SKUs, networking, collab or Webex/Meraki. | Returns BoM and architecture pack to Pre-Sales Agent. | Reports to main only Reports only to Pre-Sales Agent. |
| Cloud Pre-Sales Sub-Agent | AWS, Azure, GCP architecture, migration, landing zone and cost estimation. | Cloud pricing APILanding zone RAGMigration assessment tool | Task involves cloud migration, landing zone or hyperscaler workload. | Returns cost & architecture pack to Pre-Sales Agent. | Reports to main only Reports only to Pre-Sales Agent. |
| AI / Data Pre-Sales Sub-Agent | AI, GenAI, RAG, agentic AI, analytics, data platform and model integration. | Model catalogue RAGData platform reference DBToken cost calculator | Task mentions AI, GenAI, RAG, agents, analytics or data platform. | Returns AI solution brief to Pre-Sales Agent. | Reports to main only Reports only to Pre-Sales Agent. |
| Security Pre-Sales Sub-Agent | Security solutioning, zero trust, SOC, SIEM, compliance and secure architecture. | Security pattern RAGZero-trust reference DBCompliance mapping RAG | Task involves security architecture, SOC, SIEM or compliance posture. | Returns secure-architecture pack to Pre-Sales Agent. | Reports to main only Reports only to Pre-Sales Agent. |
IT-Security Agent — 7 sub-agents
Enterprise security reviewer and risk owner| Sub-agent | Responsibility | Tools | Delegation trigger | Reports back | Escalation |
|---|---|---|---|---|---|
| Identity & Access Sub-Agent | Reviews IAM design, roles, MFA, privileged access. | IAM policy scannerRole matrix RAG | Task references identity, access, SSO or roles. | Reports to IT-Security Agent. | Reports to main only Reports to IT-Security Agent only. |
| Network Security Sub-Agent | Reviews segmentation, firewalls, east-west and edge controls. | Network topology RAGFirewall rule analyzer | Task references network, segmentation, firewall, perimeter. | Reports to IT-Security Agent. | Reports to main only Reports to IT-Security Agent only. |
| Cloud Security Sub-Agent | Reviews cloud posture: CSPM, KMS, IAM, exposure. | CSPM APICloud policy RAG | Task involves cloud workloads or hyperscaler controls. | Reports to IT-Security Agent. | Reports to main only Reports to IT-Security Agent only. |
| Data Privacy Sub-Agent | Reviews data classification, residency, PII handling. | Data catalog APIDLP policy RAG | Task involves PII, data residency, classification. | Reports to IT-Security Agent. | Reports to main only Reports to IT-Security Agent only. |
| Compliance Sub-Agent | Maps controls to ISO, SOC2, GDPR, HIPAA, RBI, DPDP. | Compliance framework RAG | Task references regulation, audit or framework. | Reports to IT-Security Agent. | Reports to main only Reports to IT-Security Agent only. |
| Vulnerability Review Sub-Agent | Reviews CVEs, patch posture, SBOM, dependency risk. | Vuln scanner APISBOM analyzer | Task references vulnerabilities, patching, CVE, SBOM. | Reports to IT-Security Agent. | Direct escalation allowed May escalate Critical CVEs directly to Human CISO. |
| SOC / SIEM Sub-Agent | Reviews log coverage, detection rules, incident response readiness. | SIEM query APIDetection rule RAG | Task references SOC, SIEM, detection, IR. | Reports to IT-Security Agent. | Reports to main only Reports to IT-Security Agent only. |
Legal Agent — 6 sub-agents
Contract reviewer and legal risk owner| Sub-agent | Responsibility | Tools | Delegation trigger | Reports back | Escalation |
|---|---|---|---|---|---|
| Contract Review Sub-Agent | Reviews MSA / SOW structure and standard terms. | Contract repository RAGClause library RAG | New contract or redline received. | Reports to Legal Agent. | Reports to main only Reports to Legal Agent only. |
| Liability Clause Sub-Agent | Focuses on liability cap, indemnity, LD clauses. | Liability precedent RAG | Task touches liability, indemnity or LD. | Reports to Legal Agent. | Reports to main only Reports to Legal Agent only. |
| Data Protection Clause Sub-Agent | Reviews DPA, sub-processor list, cross-border data clauses. | DPA template RAGGDPR/DPDP RAG | Task references DPA, GDPR, DPDP or data flow. | Reports to Legal Agent. | Reports to main only Reports to Legal Agent only. |
| Compliance Clause Sub-Agent | Validates regulatory clauses against jurisdiction. | Regulatory clause RAG | Cross-border or regulated industry deal. | Reports to Legal Agent. | Reports to main only Reports to Legal Agent only. |
| Deviation Detection Sub-Agent | Diffs incoming contract vs standard template. | Clause diff engine | Customer redline received. | Reports to Legal Agent. | Reports to main only Reports to Legal Agent only. |
| Redline Suggestion Sub-Agent | Proposes fallback wording and counter-redlines. | Fallback clause RAG | Deviation requires negotiation. | Reports to Legal Agent. | Reports to main only Reports to Legal Agent only. |
Cloud-Ops Agent — 7 sub-agents
Cloud operations and reliability owner| Sub-agent | Responsibility | Tools | Delegation trigger | Reports back | Escalation |
|---|---|---|---|---|---|
| AWS Ops Sub-Agent | Operates and reviews AWS workloads. | AWS APICloudWatch RAG | Task involves AWS workload or service. | Reports to Cloud-Ops Agent. | Reports to main only Reports to Cloud-Ops Agent only. |
| Azure Ops Sub-Agent | Operates and reviews Azure workloads. | Azure APIAzure Monitor RAG | Task involves Azure workload. | Reports to Cloud-Ops Agent. | Reports to main only Reports to Cloud-Ops Agent only. |
| GCP Ops Sub-Agent | Operates and reviews GCP workloads. | GCP APICloud Logging RAG | Task involves GCP workload. | Reports to Cloud-Ops Agent. | Reports to main only Reports to Cloud-Ops Agent only. |
| FinOps Sub-Agent | Tracks cloud cost, anomalies, savings plans. | Cost Explorer APIFinOps RAG | Cost spike, budget review, optimization. | Reports to Cloud-Ops Agent. | Reports to main only Reports to Cloud-Ops Agent only. |
| SRE / Reliability Sub-Agent | Reviews SLOs, error budget, reliability posture. | SLO dashboard API | SLO breach or reliability concern. | Reports to Cloud-Ops Agent. | Direct escalation allowed May escalate Sev-1 directly to On-call Lead. |
| Backup & DR Sub-Agent | Validates backup and DR posture, RPO/RTO. | Backup catalog APIDR runbook RAG | Task references DR, backup, RPO, RTO. | Reports to Cloud-Ops Agent. | Reports to main only Reports to Cloud-Ops Agent only. |
| Monitoring & Observability Sub-Agent | Reviews logs, metrics, traces and alert hygiene. | Observability platform API | Task references observability or alert noise. | Reports to Cloud-Ops Agent. | Reports to main only Reports to Cloud-Ops Agent only. |
Finance Agent — 5 sub-agents
Commercial finance partner| Sub-agent | Responsibility | Tools | Delegation trigger | Reports back | Escalation |
|---|---|---|---|---|---|
| Pricing Validation Sub-Agent | Validates pricing against price book and policy. | Pricing calculatorPrice book RAG | Pricing scenario received. | Reports to Finance Agent. | Reports to main only Reports to Finance Agent only. |
| Margin Check Sub-Agent | Computes deal margin under scenarios. | Cost master DBMargin model | Pricing or cost change. | Reports to Finance Agent. | Reports to main only Reports to Finance Agent only. |
| Discount Approval Sub-Agent | Applies discount policy and threshold rules. | Discount policy RAG | Discount requested. | Reports to Finance Agent. | Reports to main only Reports to Finance Agent; Finance escalates to MD when above threshold. |
| Payment Terms Sub-Agent | Reviews payment milestones and currency. | Payment terms RAGERP | Non-standard term proposed. | Reports to Finance Agent. | Reports to main only Reports to Finance Agent only. |
| Revenue Forecast Sub-Agent | Projects revenue impact and recognition timing. | ERPForecast model | Forecast or rev-rec question. | Reports to Finance Agent. | Reports to main only Reports to Finance Agent only. |
Product Agent — 4 sub-agents
Product fitment and roadmap owner| Sub-agent | Responsibility | Tools | Delegation trigger | Reports back | Escalation |
|---|---|---|---|---|---|
| Product Fitment Sub-Agent | Maps customer requirement to product modules. | Product catalogue RAG | Requirement list received. | Reports to Product Agent. | Reports to main only Reports to Product Agent only. |
| Feature Validation Sub-Agent | Verifies whether specific features exist today. | Feature flag DBRelease notes RAG | Specific feature asked. | Reports to Product Agent. | Reports to main only Reports to Product Agent only. |
| Roadmap Check Sub-Agent | Looks up roadmap commitments and timing. | Roadmap DB | Future feature requested. | Reports to Product Agent. | Reports to main only Reports to Product Agent only. |
| Product Limitation Sub-Agent | Surfaces known limitations and constraints. | Known issues RAG | Edge case or scale concern. | Reports to Product Agent. | Reports to main only Reports to Product Agent only. |
Operations Agent — 4 sub-agents
Delivery operations lead| Sub-agent | Responsibility | Tools | Delegation trigger | Reports back | Escalation |
|---|---|---|---|---|---|
| Delivery Planning Sub-Agent | Creates phased delivery plan. | PMO trackerPlan template RAG | Scoped solution received. | Reports to Operations Agent. | Reports to main only Reports to Operations Agent only. |
| Resource Planning Sub-Agent | Maps required skills to available resources. | Resource DB | Phase plan ready. | Reports to Operations Agent. | Reports to main only Reports to Operations Agent only. |
| SLA Review Sub-Agent | Validates SLAs against precedent and capacity. | SLA repository RAG | Customer SLAs proposed. | Reports to Operations Agent. | Reports to main only Reports to Operations Agent only. |
| Risk & Dependency Sub-Agent | Identifies delivery risks and external dependencies. | Risk register RAG | Plan and resources mapped. | Reports to Operations Agent. | Reports to main only Reports to Operations Agent only. |