For 2 years, almost every AI agent in production has done the same job. It reads the question, finds the best available answer, and hands the customer a sentence.

Then a person opens a different tab and does the work.

We built an entire measurement culture around that limitation. Deflection rate. Containment rate. Tickets avoided. Those numbers were never business outcomes. They were proxies we agreed to accept because the technology could not reach the system of record.

That constraint is now lifting, and the launch Zendesk is putting out on September 14 is a clean example of what replaces it.

Here is what is being announced, and then here is what I think it actually means.

Zendesk is introducing Specialized Agents, in two parts.

Industry Agents. Prebuilt agents for high value, industry specific moments. The first is a Shopping Agent for ecommerce and retail, connecting to systems like Shopify, Stripe and Narvar to recover abandoned purchases, process exchanges, track orders, resolve delivery problems and personalise the interaction. Financial services and other industries follow.

Custom Agents. Specialists you build for the work that’s unique to your business. Describe what they need to do in natural language using a no-code Agent Builder that lets a business assemble agents around its own workflows, policies and exceptions, then connect them to its own data, knowledge, systems and APIs.

The framing Zendesk uses is an Autonomous Service Workforce. The claim behind it is that one AI agent cannot do it all, and that outcomes require a team of them.

The rollout has 3 moments, and each one proves something different.

Three things have to be true at once before an agent can do anything useful. It needs context, it needs the ability to act, and it needs governance. Miss one and you get a very recognisable failure mode.

Two out of three is where almost every pilot in the market currently lives. Context plus governance gives you a very good chatbot. Context plus actions gives you something fast and unaccountable. Actions plus governance gives you something safe and blind.

Strip the branding off any agent that genuinely clears all three and you find the same 6 layers.

A channel where the request lands. An orchestration layer that decides which agent owns it. A reasoning layer holding your policies, live customer context and historical resolution data. An action layer with real credentials into real systems. The system of record where the order, refund or address actually changes. And a validation layer that confirms the outcome held.

Most products in this category have 4 of those 6. They reason beautifully and then stop at the edge of the systems that matter.

The two that separate a chatbot from a coworker are the action layer and the validation layer. Those are also the two that are hardest to buy and hardest to fake in a demo.

Pay attention to the last one in particular. Zendesk validates a resolution at 72 hours rather than closing a ticket at 24. Whether or not you buy their product, that is the right instinct. A ticket that closes and reopens 3 days later was never resolved. It was deferred, and someone reported it as a win.

The word autonomy has been flattened into marketing. It helps to be specific about what level of it you are actually being sold.

Level 0 answers. Level 1 recommends. Level 2 drafts the action and waits. Level 3 takes the action and asks for review. Level 4 takes the action and then verifies that it held.

Most enterprise pilots are sitting somewhere around level 1, which is why they demo beautifully and change nothing. Each step up the ladder costs something concrete: customer context, then read access, then write scope and limits, then governance and an outcome loop. Nobody skips a rung.

This launch is aiming at level 4. Whether it lands there is the thing to watch.

This is the part of the launch I would push hardest on if I were briefing a CIO.

The instinct in most enterprises right now is to build one agent, connect everything to it, and iterate. It demos well. It falls apart in month 4.

The failure is not intelligence. It is accountability. When one agent covers 40 intents, nobody owns any single workflow. Tuning the refund path quietly regresses the billing path. Edge cases collapse into generic language. And there is no clean unit you can attach a target to, so the programme never gets a business case beyond cost avoidance.

Scoping by job fixes something structural. Zendesk has 10 commerce agents on the roadmap through November. Write them out as a routing table and the argument stops being philosophical.

Every row gets an intent pattern, a named agent, an explicit write scope, a guardrail and a human owner. 8 of the 10 hold write access. The other 2 are read-only and should stay that way.

Read that table as an org chart rather than a feature list. Every one of those rows has a human team behind it today, with a manager, a target and a queue. That is exactly why it works as an agent boundary, and it is also why the boundary is enforceable. You cannot put a 500 USD cap on "the AI". You can put one on stripe.refund:create.

The honest trade is that specialization moves the difficulty rather than removing it. You now have an orchestration problem, a routing problem, and a handoff problem between agents. That is a better class of problem to have, because it is an engineering problem with known patterns, not an accountability vacuum.

Here is the reframe I would take into a budget conversation.

Walk one ecommerce journey and look at what an answer-only bot returns versus what an acting agent does, moment by moment. Discovery, checkout, post-purchase change, delivery failure, return.

At every one of those 5 points, the answer-only version is technically correct and commercially useless. Here is the size guide. Try another card. Contact us within 24 hours. Here is your tracking link. Here is the returns policy.

The acting version does something to the order.

That is the whole argument for this category, and it is why service is quietly becoming a revenue conversation. Turning a refund into an exchange is not a support metric. Recovering an abandoned checkout is not a support metric. Editing an order before fulfilment protects margin that a deflected ticket never touched.

If your AI programme is still being justified on headcount avoided, you are underselling it, and you are also making it very easy to cut.

An agent that can act is an agent that can act wrongly. That is not a reason to slow down, but it is a reason to buy differently.

These are the 6 questions I would put to any vendor in this category, including this one. What matters is not the question, it is how the answer sounds.

If a vendor answers 5 of those 6 crisply, you are dealing with a product. If they answer 2, you are dealing with a demo.

Whether specialization holds outside retail. Ecommerce is the friendly case. The workflows are well documented, the systems are standardised, and the actions are reversible. Financial services is the real test, where identity, regulation and irreversibility all land on the same transaction.

Whether the no-code promise survives complexity. Agent Builder makes the first agent easy. The question is what building agent 15 looks like, and who is maintaining the exceptions by then.

Whether outcome pricing spreads. Pricing on validated resolutions rather than seats or tickets is the strongest signal a vendor can send about confidence in its own product. If more of this market moves that way, buyers win regardless of who they choose.

Whether anyone reports the failures. I want to see the first honest public number on how often an acting agent takes a wrong action, and what it cost. That number exists somewhere. Publishing it would do more for enterprise adoption than another launch deck.

2026 was the year we all agreed AI agents were real.

2027 is the year the CFO asks what they changed.

The teams with an answer will be the ones who scoped agents by job rather than by technology, connected them to systems that matter, and decided what a good outcome was before they deployed anything.

Zendesk is making that bet publicly this week. Whether or not they are the vendor you pick, the shape of the bet is worth studying.

In partnership with Zendesk. As always, the analysis and the criticism are my own.

I interview the founders, CIOs and builders behind this shift every week on The Ravit Show. If there is a question you want me to put to them, reply and tell me.