General lesson: escalate a case, not a conversation
AI support tools often treat escalation as a routing event: summarize the conversation, attach the transcript, choose a queue, and notify a person. That moves text, but it does not prove that the next operator can understand the problem, distinguish facts from guesses, or continue safely. Long transcripts bury the user's current goal among abandoned branches, repeated questions, model suggestions, and stale context.
The sharper lens is case reconstruction. A useful escalation receipt answers what the user is trying to achieve now, which product object or transaction is affected, what the system has verified, what remains inferred, which actions were attempted, what changed, and which bounded decision needs human judgment. Conversation history stays available as supporting evidence; it is not the primary operating record.
Separate evidence, interpretation, and authority
Build the receipt from distinct layers. Evidence includes authenticated account state, request identifiers, timestamps, policy versions, tool responses, and user-confirmed facts. Interpretation includes the model's classification, suspected cause, urgency, and proposed next step. Authority includes what the assistant was allowed to inspect or attempt, what the user consented to share, and which actions still require a human or account owner.
A compact schema can use {case_version, user_goal, affected_object, evidence_manifest, inference_set, attempted_actions, observed_outcomes, authorization_scope, consent_receipt, unresolved_decision, risk_tier, urgency, next_owner}. Each inference should point to its supporting evidence and carry a status such as proposed, confirmed, rejected, or unknown. The operating invariant is that generated interpretation may guide triage but cannot silently become verified case fact.
Project example: preserve review-first boundaries
Prospr's public portfolio description connects opportunity import, editable document generation, application tracking, credit controls, privacy-aware AI assistance, and a review-first workflow. Authority Router adds public architecture context around explicit permissions, accountable owners, evidence requirements, escalation paths, and execution boundaries. Public project context: portfolio projects.
These projects provide a public-safe architecture example, not evidence of a deployed customer-support system or support-volume results. Imagine a user reporting that an imported opportunity did not appear or that a credit-backed workflow stopped after payment. A useful escalation would preserve the affected import or entitlement reference, visible account state, safe diagnostic results, actions already attempted, and the exact unresolved decision. It should exclude unrelated applications, message content, recruiter details, credentials, and any model guess that has not been verified.
Implementation pattern: reconstruct, freeze, assign, reconcile
Reconstruct the case from authoritative systems before handoff. Resolve durable identifiers, capture a bounded evidence manifest, record tool calls and their outcomes, and ask the user to confirm the current goal when the conversation contains several possible problems. Generate the human-readable synopsis from that structured case, not the other way around. Freeze a handoff revision so later retries or new messages cannot alter what the specialist originally received.
Use explicit states such as collecting -> reconstructed -> consented -> assigned -> accepted -> investigating -> resolved -> reconciled, with branches to needs_evidence, scope_mismatch, duplicate, withdrawn, and security_review. Assignment names the team or person expected to decide; acceptance confirms the case is in scope; reconciliation records the decision, corrective action, user communication, and verified product state without overwriting the original receipt.
Measure reconstruction quality before escalation speed
Time to handoff matters, but a fast incomplete case simply transfers investigation cost. Track evidence-completeness rate, unsupported-inference rate, cases returned for missing context, duplicate-question rate after acceptance, time from acceptance to first informed action, permission or consent mismatch, and the proportion of resolutions linked back to a verified state change. Keep automation time, queue time, investigation time, and user-wait time separate.
Use a reconstruction-gap score for sampling: count missing affected-object identity, missing authoritative evidence, unverified attempts, absent authorization scope, unclear user goal, and no bounded decision. Review false urgency and false resolution separately because both damage trust in different ways. A healthy workflow does not maximize the number of escalations avoided; it minimizes avoidable harm, repeated work, and cases whose history cannot explain the eventual decision.
Failure modes, privacy limits, and trade-offs
The most dangerous failure is confident compression: a fluent summary drops a contradictory fact, turns a hypothesis into a cause, or hides that a tool result is stale. Other risks include attaching excessive personal data, exposing secrets in logs, allowing the assistant to retry a side effect during reconstruction, assigning a case before consent, merging two users' incidents, or marking resolution from an agent message without reading back the authoritative state.
Structured receipts add storage, schema evolution, redaction, and operator-interface work. Low-risk informational questions may need only a short summary and a link to the source answer. The fuller contract is justified when the workflow touches identity, money, entitlements, private records, irreversible actions, or repeated failures. Retention should be proportionate, access scoped, and corrections append-only enough to explain what changed without preserving unnecessary conversation forever.
Run a five-case escalation diagnostic
Apply this tomorrow to one AI-assisted support path. Test five synthetic cases: the user changes the goal halfway through, the model proposes a cause contradicted by account state, a safe retry returns an ambiguous timeout, the transcript contains unrelated sensitive details, and a specialist resolves the case outside the support tool. For each case, inspect the frozen receipt, not the transcript, and ask whether an authorized specialist can identify the affected object, trust the evidence, see every attempted side effect, understand the remaining decision, and verify the final state.
The workflow passes only if unsupported inferences remain visibly provisional, unnecessary private data stays out of the handoff, repeated processing does not repeat side effects, ownership is explicit, and the resolution returns as a durable receipt. If the specialist must start by asking the user to repeat the problem or by searching several systems for identifiers the product already had, the AI shortened the conversation but did not improve the support operation.