A new demo request should not spend forty minutes waiting for someone to notice a notification. It also should not receive a robotic paragraph that invents a price, promises an integration, or calls the prospect by the wrong company name. The useful middle ground is a bounded lead-response agent: fast enough to act while intent is fresh, but limited enough to stay boring where boring is good.
The agent should enrich and score the lead, assign the correct owner, prepare a short response from approved facts, and either send or request approval based on risk. It should never negotiate, quote custom pricing, or claim a capability that is not present in the approved knowledge base.
The exact workflow—not “AI does sales”
Start from one event: a high-intent form submission. Everything after that should be observable and reversible.
- Capture.Receive the form payload and preserve the original values.
- Validate.Check email shape, disposable domains, missing consent fields, and obvious spam.
- Enrich.Append firmographic data only when confidence clears a defined threshold.
- Score.Apply deterministic rules first: geography, employee band, role, use case, and existing account status.
- Route.Assign an owner by territory or segment and create the CRM task.
- Draft.Generate a 60–100 word reply using the prospect’s stated problem and approved product facts.
- Approve or send.Auto-send only low-risk templates. Queue strategic accounts, unclear requests, and pricing questions for review.
- Log.Store the inputs, decision path, output, owner, and final disposition.
Give the agent decision rights, not unlimited freedom
Handle the routine
- Reject obvious spam
- Apply a documented score
- Choose from approved response patterns
- Create tasks and reminders
Protect the edge cases
- Enterprise or regulated accounts
- Security and legal questions
- Custom pricing or discounts
- Ambiguous buying intent
Keep hard boundaries
- Invent product claims
- Delete or merge CRM records
- Change opportunity value
- Send attachments from unknown sources
A useful rule: language generation can be flexible; permissions and business policy should be deterministic.
Write the data contract before the prompt
Most failures blamed on “the model” are actually missing-field failures. Define the minimum record the workflow needs:
If a required field is absent, the agent should ask one useful question or route to a person. It should not fill the gap with a guess.
A 14-day pilot that can fail safely
Map the current path and label 50–100 historical leads with the correct owner and outcome.
Run in shadow mode. The agent scores and drafts, but humans continue the existing process.
Compare routing accuracy and edit distance. Fix policies, not isolated sentences.
Enable low-risk sends for one segment with daily review and an instant off switch.
Choose one form, one segment, one language, and one owner group. Expansion is earned by evidence.
Measure business movement and safety together
Speed alone is a vanity metric. A fast wrong response merely creates a faster mess.
Three ways this system quietly goes bad
It treats enrichment as truth
Third-party data can be stale. Keep the original submission, store confidence, and never overwrite a prospect’s own answer with enrichment.
It optimizes for replies instead of fit
A clever subject line is irrelevant if low-fit leads reach senior sellers. Route quality before copy quality.
It has no owner when automation fails
Every stopped run needs a named queue, a reason code, and a response-time expectation. “Failed” is not a destination.
Questions teams ask
Should the agent send the first email automatically?
Only for a narrow, low-risk segment using approved facts and templates. Strategic accounts, pricing questions, and uncertain classifications should require approval.
Does this replace an SDR?
No. It removes intake, enrichment, routing, and first-draft work so an SDR can spend more time on judgment, discovery, and follow-up.
What is the smallest useful version?
One form, one CRM pipeline, deterministic routing, a single approved response pattern, and a human review queue.



