Offer to build the pilot's test cases. Tell the pilot lead you will assemble real cases from the company's own history, write the awkward ones the agent must refuse or escalate, and rerun them every time its brief or sources change. Then review its live output too. QA testers who do both become the people who decide when an agent is ready.
Why does an agent pilot need a QA tester?
Software companies often pilot agents on their own operations first: customer support replies, account changes, refund handling, internal IT requests. The pilot lead, often in support operations or product, wants the agent working. Few people on the team think like a tester: what happens at the edge, what breaks after a change, what an attacker would try.
Agents are tested differently from ordinary software. The same input does not always produce the same words, so you test the decision rather than the exact output. In a governed setup, certification replays the agent against real cases from the customer's own operation and scores each answer against a floor, across separate gates: grounded, refuses, depth, escalates, scope, adversarial and stable. Each gate must clear on its own. That is a tester's world. The guide to AI agent jobs and careers shows where this skill set leads.
How do you make yourself useful from day one?
- Ask the pilot lead for access to past cases in the scope, such as last quarter's support tickets with personal data removed.
- Build a case set with three layers: typical cases, edge cases and cases the agent must refuse or escalate.
- Write adversarial cases. Instructions hidden in a customer's attachment, a request to act outside scope, a message claiming to come from a manager. Prompt injection and excessive agency are both on the OWASP Top 10 for LLM Applications.
- Propose a regression routine: rerun the set after every change to the agent's brief, sources or limits.
- Offer to review live output for a defined queue as well, so your tests reflect what really happens.
- Send the offer in writing, with a sample of ten cases attached.
What will the agent do, and what will you check?
- Agent, depth 1: reads the ticket, the customer account and the knowledge base. The account system is sealed. The customer's description is declared. An attached file or linked web page is external.
- Agent, depth 2: drafts the reply or the account change.
- Support reviewer: approves or edits each held draft.
- Agent, depth 3: once certified, completes routine changes within the company's limits.
- You: run the case set before go-live, after each change, and on a schedule, and record which gate failed and why.
- You: sample live decisions weekly and turn any new failure into a new test case.
- Pilot lead: decides whether to seek more depth, on the evidence.
| Step | The agent does | Depth | Stays with a person |
|---|---|---|---|
| Ticket reading | Reads ticket and sources | 1 | You test what happens with poor or hostile sources |
| Reply drafting | Drafts | 2 | Reviewer approves; you sample |
| Routine account changes | Completes within limits | 3 | You test the limits hold |
| Refunds above limit | Drafts only | 4, refused | An authorised person makes it |
| Out-of-scope requests | Refuses, naming the bound | none | You test that refusal fires |
| Regression after changes | Replayed on the case set | none | You run and report |
Which controls will you own?
- The case set. It must include the company's real awkward cases, not just easy ones. Evidence: the versioned case list.
- Refusal and escalation tests. Every red line has a case. Evidence: the results per gate.
- Regression after change. No change to the brief or sources goes live without a rerun. Evidence: the before-and-after results.
- Injection tests. External content must never steer the agent into acting. Evidence: adversarial results.
- Drift watch. Cases rerun on a schedule catch slow decay. Evidence: the trend over time.
What should you report?
Report pass and fail by gate, failures found in live sampling that the case set missed, regressions caught before release, and the time from a reported problem to a fixed and retested agent. Keep reports short and specific. Pilot leads act on a list of failing cases; they skim a summary.
That record describes roles such as agent quality analyst, AI operations analyst or agent reviewer. Titles vary; read adverts for testing, review, exceptions and quality duties. How a QA tester can move into AI operations covers the move, what jobs a QA tester can get with AI agent skills lists options, and the specific routes from QA tester to AI agent reviewer and to AI operations analyst go further.
Where do QA testers go wrong on pilots?
- Testing exact wording. Test the decision: right verdict, right source, right escalation.
- Only testing the happy path. The value is in refusals, escalations and attacks.
- Building cases from imagination. Real cases from the operation reveal problems invented ones do not.
- Staying out of live review. Testers who never see production miss what matters.
- Reporting without a fix path. A failing case is more useful with a suggestion: a missing source, a vague line in the brief, a limit set too high.
Where the Academy fits
Pryme Intelligence Academy's Operator track is the starting point and the key to the Builder track, where people design, train and certify agents, finishing with a capstone agent certified in Attest to depth 2 or higher. For a QA tester, Operator first and Builder next is a natural sequence.
Questions people ask
Is testing agents the same as testing software?
Partly. The discipline of cases, regression and edge conditions carries over. The difference is that you judge decisions and evidence rather than exact outputs.
Do I need machine learning knowledge?
No. Governed agents are qualified by changing their brief, sources, bounds and certification, not by retraining a model. Testing them is about cases and decisions.
What if the pilot team does not want a tester?
Offer ten hard cases and show what happens. A failing case is usually the most persuasive argument a tester has.