FG—01AI Design Field Guide

Search the field guide

Search chapters, principles, patterns, worksheets, and glossary terms

PTN—34

Human-in-the-loop escalation

Detect when a task exceeds the AI’s competence or authority, and hand it to a person with full context.

Every AI system has an edge, and what happens at the edge defines whether people trust the middle. Escalation is the deliberate handoff: the AI recognizes it is out of its depth — low confidence, high stakes, an angry customer, a policy boundary — and routes the situation to a human instead of improvising. The alternative is an AI that bluffs at its boundaries, which is how support bots end up promising refunds they cannot issue and agents end up executing plans nobody sanctioned.

The handoff itself is a designed artifact, not a dropped call. The receiving human needs the full transcript, the AI’s working state, what has already been tried, and why the escalation fired. The person being helped should never have to repeat themselves — re-explaining a problem to the human after twenty minutes with the bot is the single most rage-inducing pattern in AI support, and it is entirely a design failure, not a model failure.

Escalation triggers deserve as much design as the flow. Some are user-initiated — a visible “talk to a human” affordance that works on the first ask, not after three deflection loops. Some are system-initiated: confidence thresholds, sentiment signals, category rules for legal, medical, and financial territory. Both must exist. A system that only escalates when asked misses the people who don’t know they should ask; one that never lets you ask is a trap.

When to use

Design considerations

Pitfalls

In the wild

Intercom Fin
Answers support questions itself but hands off to a human agent with the conversation history attached when it cannot resolve the issue or the customer asks.
ChatGPT
Redirects conversations touching self-harm toward crisis resources and human help lines rather than continuing as the counterpart — a category trigger, not a confidence one.
Claude Code
Stops and asks the person to decide when it hits permission boundaries or ambiguous instructions, rather than guessing its way past the edge of its authority.
Waymo
Rider support and remote fleet-response humans can be pulled in when the autonomous system encounters situations it cannot resolve alone — escalation designed into a safety-critical product.

Principles served

Discussed in the guide