Back to the Delegate lesson
On this page

This is the full, in-depth reference for Level 3. For the short version, go back to the lesson.

Level 3 — Delegate (Cowork)

The senior class. Verb: Delegate. Org-rung: Senior Management. You stop handing Claude a single question and start handing it a whole job — a standing space, a set of skills, and a brief that says what "done" looks like — then you let it run the multi-step work and judge the finished deliverable instead of driving every keystroke. Master this class and you trade turn-by-turn control for a hand-over of the doing: Claude reads, merges, decides, formats, and comes back with a result; you set the tempo and own the verdict.


Before you start — five things to read once

These get used on every page below. Read them now and the rest reads cleanly. If you came up through Level 1 and Level 2, the shape is identical — the same ladder, the same three hats, the same self-contained rules. What changed is reach: Claude now runs the work, not just a fetch.

The four-level ladder (where you are)

This module is Level 3 of 4. The whole ascent:

Level Verb Class name Rung In one line
1 Ask Chat Beginner One expert in one conversation; it advises, you act.
2 Connect MCP Middle Manager You grant Claude scoped access to a real tool so it fetches and acts on your data — one action at a time, you in the loop.
3 (you are here) Delegate Cowork Senior Management You hand Claude a standing space and a whole job; it runs the multi-step work and you review the finished deliverable.
4 Orchestrate Code Leadership You direct parallel agents against a codebase or system, under written rules they obey.

"MCP" (Level 2's class name) is short for Model Context Protocol — the plumbing that lets Claude reach a real tool like Drive or Gmail. You don't need to understand it to play Level 3; you only need to know that granting that reach happened at Level 2, and here you put it to work inside a standing space.

If you skipped straight here: the two muscles built below — a clear brief and a real review of the deliverable — are this level's entire game. They are the L1 framing-and-verify reflex, scaled up from one answer to a whole finished output. Everything else is loadout and procedure.

A note on the word "Cowork." Product names move. This module uses "Cowork" for the class where Claude is given a standing workspace and runs a multi-step job for you to review. Whatever your build calls the surface, the class is defined by the behavior — delegate a job, review the result — not the label on the button. If the names below don't match your screen, see the availability note.

Which surface this module assumes. The pieces below — a standing space, Skills, subagents, a standing brief, inherited connectors — are real, but they do not all live on one product surface. Skills work across Claude.ai, Claude Code, and the Agent SDK; subagents and standing-brief files (AGENTS.md / CLAUDE.md) are primarily a Claude Code capability; Claude.ai Projects carry saved instructions and files instead of a brief file. So read the loadout as a conceptual loadout whose concrete form varies by surface — not as four switches you'll find in one window. Where it matters, the text says which surface a piece belongs to.

The three hats (your jobs)

Across the whole ladder you wear three hats. They never go away; what changes is which one does the heavy lifting. At Delegate level the work runs while you watch — so the hat that decides what runs, what gets reviewed, and when it ships is the one in charge.

Hat What it means The behavioral tell — you're wearing it when…
Navigator You own the destination and the route. You decide what the job is meant to produce and what "good" means before you delegate. …you wrote the brief — the whole job, the constraints, and the shape of "done" — before the agent started, instead of discovering the destination in the output.
Verifier You demand evidence. You treat a finished, confident deliverable as a claim to be tested, not a result to be accepted because it looks complete. …you opened the deliverable and checked the load-bearing parts against the source, rather than skimming it, seeing it was formatted and done, and shipping it.
Conductor You set the tempo and cue each move — what runs, in what order, when to hold, what gets reviewed, and when it ships. …you decided this job is ready to run unattended and that one needs a checkpoint, and you called the moment the deliverable was good enough to accept or send back.

At Level 3, the Conductor hat dominates. The class is no longer "ask one good question" (Navigator-led) or "grant one safe scope and check the action" (Verifier-led). It's "engineer a job, set it running, and decide when it's done" — which is tempo, sequencing, and the accept/redirect call. That is Conductor work.

But you still wear all three, and at this level the cost of dropping one rises:

The vocabulary is the connective tissue of the whole ascent. The Verifier reflex you built at Level 1 on cheap mistakes is the prerequisite that makes delegation safe; the Conductor hat is what this level adds.

Mini-glossary (plain definitions, used throughout)

These terms are new at this level — you meet them before they're fully unpacked in Section 3. Plain definitions first:

Availability note: the features named in this module (a standing workspace / Projects / folders, Skills, subagents, a standing brief, connectors, and the multi-step delegated runs themselves) vary by plan, by product surface (Claude.ai, the desktop workspace, Claude Code), by device, and by account settings — and the names move as products evolve. If a control described here isn't on your screen, or is called something else, that's why — not a mistake on your part. The class is defined by the behavior (delegate a whole job, review the deliverable), so the lesson holds even where the labels differ.


0. Class Card — at a glance

Verb Delegate
Rung Senior Management
Reach A standing workspace Claude runs in — files, skills, and a standing brief that persist between sessions — plus the multi-step work it does inside that space (reading, merging, deciding, formatting, producing a deliverable), within the scopes and tools you set up. It runs the steps on its own; it does not invent a job you didn't brief or reach past the space and skills you gave it.
Your job Conductor (dominant) — you set the tempo, decide what runs, what gets reviewed, and when it ships — wearing Navigator (you wrote the brief) and Verifier (you judge the finished deliverable) as the work demands
The hand-over this level buys you The doing. At Level 1 you handed over the thinking and did every action yourself; at Level 2 you handed over the looking-up, one supervised action at a time. Here you hand over the whole multi-step job — Claude runs the steps unattended and hands back a finished result. You stop driving the work and start judging it.

In ten seconds: Cowork is where you stop asking and start delegating — you give Claude a standing space, a set of skills, and a brief that says what the finished job should look like, then let it run the steps and come back with a deliverable you review. You trade turn-by-turn control (you're now on the loop, not in every step) for a far bigger hand-over: an entire job done while you do something else. The catch you accept in that trade — and the reason the brief and the review are the whole craft — is that the work can now be finished, confident, and wrong before you ever look at it. So you live by two rules: brief it like you'd brief a capable hire, and review the deliverable like it might be wrong, because looking done is not the same as being right.


1. What This Level Is — and the Thinking Behind It

The class in one line: Cowork is a standing space you hand a whole multi-step job — and an agent that runs the steps inside it while you review the finished result.

The plain definition

You stop typing a question and start writing a brief. Instead of "what's the difference between a budget and a forecast?" you hand over "turn these three meetings of notes into a finished weekly summary with the decisions and owners" — and Claude works the steps: it reads all three sets of notes, merges the overlaps, pulls out the decisions, assigns the owners, formats the summary, and hands back a finished document for you to review and accept. You didn't drive any of those steps. You defined the job, set the room up, let it run, and judged the result. That is the whole mechanic. The class is built on one move: Delegate.

It feels like managing a competent new hire: you don't watch their hands, you brief the job and check the work. The class is powerful. Playing it well is entirely about the brief and the review.

The thinking that makes it work

Three practices separate a senior operator from someone who just types a bigger prompt.

The boundary of the class — stated precisely (and used identically everywhere below)

Be exact here, because a loose version of this boundary is what makes people either over-trust an agent or refuse to delegate at all. The precise statement is:

At Delegate level Claude runs multi-step work on its own, but only within the space, skills and brief you set up. You are ON the loop — reviewing, redirecting — not IN every step. You judge the finished deliverable, not each keystroke.

That is the line. Note what it does not say: it does not say "it does anything you can imagine" (it runs the job you briefed, inside the room you built — it doesn't invent new jobs or reach past its scopes) and it does not say "you walked away" (you're on the loop, supervising and able to redirect, not out of it). What it says is narrower and true: Claude runs the steps; you set the job and judge the result. Concretely:

It will NOT… Because… What that means for you
Run a job you didn't brief — invent a new objective, add a section you didn't ask for, change the deliverable's purpose It works to the brief and room you set up; the brief is the boundary of the job If the deliverable does something you never asked for, that's drift to catch (Section 7), not a feature — your brief left a gap it filled.
Reach past the scopes and tools you granted — touch a folder, account, or system outside what the room inherited Its reach is the scopes you set (Level 2's grants, narrowed to this job) "Read meetings/, write a draft back" is a scope; it can't quietly read the rest of your Drive or send mail unless you granted that.
Guarantee the finished work is correct just because it finished "It ran" proves the process completed, not that the content is true A whole multi-step deliverable can be built on one wrong early assumption — review the load-bearing parts against the source (Section 8).
Make the irreversible, real-world calls — send the email, set the live date, make the formal assignment Those are acts you keep on the loop; the agent drafts, you decide It can draft the summary and the distribution note; you confirm the live launch date and hit send (Section 9).

These are not bugs. They are the boundary of the class — and the new risk that boundary admits is the price of the leverage: wrong multi-step work, done unattended — a whole finished output built on a wrong assumption, handed back looking done. That risk is exactly what the brief (to prevent it) and the review (to catch it) exist to manage. Level 4 moves this boundary again, to many such jobs in parallel under rules you set once.

Why mastering this class matters most before the top

At Orchestrate, the brief becomes a policy that governs many parallel agents, and the per-deliverable review becomes the gate before anything merges. A vague brief here is one wrong summary; a vague rule there is wrong work across your whole system, fast. So the promise of this level is precise:

Master the brief and the deliverable-review here, on the class where you delegate one job and review one result, and Level 4 inherits both as the load-bearing prerequisites of safe orchestration.

The rest of this module is reps on those two muscles.


2. Skill-Point Allocation — the Judgment of When to Play This Class

If RPGs aren't your thing: a "class" is just a role with its own strengths; "skill points" are your limited time and attention. The lesson is to spend them where they pay off — not to reach for the most powerful-looking class every time.

Every level can technically produce a weekly summary. That is exactly the trap. Building a standing room, writing a brief, and equipping a Skill for a thing you'll do once is a senior manager scheduling a project kickoff to answer a single email. The skill is not "can Delegate do it" — it's "is delegating-and-reviewing the right spend for this job."

Delegate is the most expensive class to set up and the cheapest to re-run. You pay up front — a room, a brief, scoped tools — and you get it back every time the job repeats and every time the work is too multi-step to babysit. Allocate well and one good brief runs a job for months. Allocate badly and you over-spend (a room and a brief for a one-off a single chat would have cracked) or under-spend (driving a ten-step job turn by turn in Chat when you should have delegated it once).

The master gate: the Delegation Test

There is one spine to carry. Everything else hangs off it. Before building a room or writing a brief, run the job through three clauses — it must pass all three:

Delegate when the job is multi-step AND repeatable AND result-reviewable.

Clause What it means It FAILS the clause when…
Multi-step The job is several dependent steps, not one ask or one fetch — read and merge and extract and assign and format. It's a single question ("what's a good cadence?" → that's Chat) or a single fetch ("what's on my calendar?" → that's Connect). One step is not a job.
Repeatable The job's shape recurs even if the inputs change — you'll run it again next week, or it's worth the setup once. It's a genuine one-off with a backdrop that never recurs. Building a standing room for it is pure overhead — a throwaway chat is cheaper.
Result-reviewable You can write down what "done" looks like and check the finished deliverable against it. You can't define "done," or every step is so irreversible it must be approved live (then stay in the loop — that's Connect, not Delegate). If you can't review it, you can't delegate it.

The point is not "delegate everything multi-step." It's that all three must hold — miss one and you've mis-allocated. Three corollaries fall out of the gate, each a sub-move of it:

The decision: do it yourself, step down, stay, or step up

Run the job through the gate, then read it off this table. (This is the actionable form — keep it; it encodes the judgment without a second checklist.)

Signal in the job Right class Why
"Explain / compare / draft this one thing" Chat (L1) One ask, one answer; no multi-step work to run.
"Fetch / act on one thing in my real tool, and I'll watch" Connect (L2) A single supervised action — you stay in the loop; nothing to delegate.
"Run this whole multi-step job and hand me the finished result to review" Delegate (L3) Multi-step + repeatable + reviewable — the gate passes.
"Run this same job every week over fresh inputs" Delegate (L3) + a standing brief/Skill The repeatable case the level is built for; encode it once, re-run cheap.
"Run many such jobs in parallel across my whole system under rules I set once" Orchestrate (L4) Past one job — needs standing rules and parallel agents, not a room per job.
"It's faster by hand and I'll only do it once" No class — just do it The setup cost exceeds the job. The cheapest spend is sometimes zero.

Threaded through the running scenario — stay, step down, step up, or skip

The weekly-summary job makes the gate concrete. Watch the same job change classes as its shape changes:

The boundary that separates Delegate from the rest, restated exactly: At Delegate level Claude runs multi-step work on its own, but only within the space, skills and brief you set up. You are ON the loop — reviewing, redirecting — not IN every step. You judge the finished deliverable, not each keystroke. Below that line (one ask, one supervised fetch) you're cheaper in Chat or Connect; above it (many jobs, parallel, under standing rules) you've outgrown the room and want Orchestrate.


3. Equipment — the Tools You Equip at This Level

At Chat you equipped pieces that changed what one ask could stand on. At Delegate the loadout changes kind: you're no longer dressing a conversation — you're building the room the job will run in. Every piece here exists to make unattended, multi-step work safe and repeatable: a standing space so the work has somewhere to live, Skills so it does the steps your way, subagents so a big job splits into focused passes, and a standing brief so the room remembers the rules without you re-typing them.

Remember the which-surface caveat from the front matter: these are a conceptual loadout. On Claude.ai the "room" is a Project with saved instructions; in Claude Code it's a project folder with an AGENTS.md/CLAUDE.md. Subagents are mainly a Claude Code capability. Read the table for what each piece does, then take the concrete form your surface offers.

Three things to hold before the table:

The loadout

Equipment What it adds When to equip When NOT to Scope & safety note · where to find it
A standing workspace ("room" — a Project on Claude.ai, a project folder in Claude Code) A persistent home for one job or job-family: its files, its instructions, its history — so a delegated run starts already knowing the backdrop instead of being told it each time. Recurring, multi-step work with a stable backdrop — the weekly-summary job, an onboarding pipeline, a reporting cadence. Anything you'll hand over more than a couple of times. A genuine one-off, or work whose context changes completely every run (no stable backdrop to persist). A throwaway chat is cheaper. Everything in the room is readable by every run inside it — treat it as a shared shelf, not a private drawer. Don't drop a file in the room you wouldn't want a future unattended run to read or act on. Find it (Claude.ai): click Projects in the left sidebar → New project; then add its files and instructions once. (Other surfaces differ — Claude Code uses a project folder.)
Skills A reusable, named bundle of instructions (and, on surfaces that support it, supporting files or scripts) that teaches Claude how you do a specific kind of task — your summary format, your house voice, your owner-assignment rules — loaded on demand so the method travels with the work instead of living in your prompt. When a multi-step job has a repeatable method you'd otherwise re-explain every run — "decisions go in a table, owners are named not roled, hold-items flagged." Equip a Skill and the brief stops carrying procedure. When the "how" is one-off or you're still figuring it out — codifying a method you haven't stabilised just bakes in a guess. Don't write a Skill before you've run the job by hand once. A Skill governs how the task is done every time it's invoked; on surfaces where Skills can carry scripts, whatever it's allowed to run, it runs on every job that invokes it — so review a Skill's contents the way you'd review a standing instruction. Find it: the Skills area of your surface — you author or install a named Skill (a SKILL.md plus any files), then runs in that space use it when relevant. Skills are supported on Claude.ai, Claude Code, and the Agent SDK.
Subagents (primarily Claude Code) Splits a large job into focused sub-passes: a lead agent spawns helpers, each with its own context and only the slice of the job (and the tools) it's granted, then collects their results. Keeps a long job from blurring — the "read the notes" pass isn't polluted by the "format the output" pass. When the job is big or multi-part enough that one continuous pass would lose the thread, or when sub-parts are independent enough to run cleanly in isolation (read three sources → merge → format). Short, linear jobs where coordinating helpers costs more than it saves. If a single focused pass does it, don't fan it out. Each subagent runs with the tools it is granted — which can and should be a narrower subset than the main job's; they do not simply inherit the parent's full reach. Scope each to only what its slice needs. (Fanning many such agents across your whole system, under rules set once, is Level 4 — note the wish when it comes; Section 13.) Find it: in Claude Code, subagents are defined as markdown files in .claude/agents/, each with its own prompt and tool permissions; some other agentic surfaces split work this way, others don't.
A standing brief (Project instructions on Claude.ai; an AGENTS.md/CLAUDE.md file in Claude Code) The durable, in-room instruction set read first by anything that works there: what the job is, how "done" is defined, the conventions, the do-nots — the version of the brief you'd otherwise repeat. It's what makes a room remember. Always, the moment a room exists. The brief is the single highest-leverage piece at this level: it's where a vague delegation becomes a precise one. The signature pitfall (Section 11) is a thin brief. (No "skip it" — but don't bloat it.) Its real cost is maintenance: a standing brief rots (an old definition of "done," a renamed owner) and a bloated one buries the rules that matter. See pitfall #4. A wrong or stale line governs every unattended run silently — review the brief as a standing instruction, not set-and-forget. Find it (Claude.ai): in your Project, open Instructions and write the brief there; (Claude Code): create a plain-text AGENTS.md or CLAUDE.md file in the project root and write the brief into it — the tool reads it first.
Inherited connectors (the Level-2 tools the room can use) Where the surface supports it, a delegated run can use connectors you've authorized — Drive, Gmail, Calendar, custom MCP servers — to fetch and act on real data as part of its multi-step work, not just reason over what you pasted. When the job's steps genuinely need live reach: read the three notes from Drive, write the finished summary back to a folder, pull figures from a real source. When the job runs entirely on material you hand it inline and produces an artifact you'll move yourself. Don't grant standing reach a job doesn't use. The sharpest cost on the page: a room can act through these connectors unattended, across many runs. Connector availability and scopes are configured per surface/account — they are not automatically inherited from a Chat session — so grant the narrowest scope the job needs. "Wrong action on a real system" (the L2 risk) becomes "wrong action mid-way through unwatched multi-step work." Find it: connectors are added/scoped in your account/connector settings (the Level-2 step); a room uses the grants you've authorised where the surface allows.

Availability note: the exact names, surfaces, and packaging of these pieces vary by plan and surface (Claude.ai Projects, the desktop workspace, Claude Code in the terminal) and by account. Skills, subagents, and standing-brief files are all real capabilities, but they live on different surfaces — subagents and AGENTS.md/CLAUDE.md are primarily Claude Code; Projects use saved instructions; Skills span Claude.ai, Claude Code, and the SDK. Which you'll see depends on your surface — if a control isn't where described, that's surface variance, not your mistake.

How the pieces compose — reconciled once (read this; it's the level's most-confused point)

People meet four nouns here and assume they're four switches to toggle in one window. They aren't one window — and they nest. Seeing the nesting is what makes the level click:

  1. The standing room is the container. It's the outermost shell — the where. Everything else lives inside it (a Project, or a project folder).
  2. The standing brief is the room's rulebook. It's the what and how-strictly — read first by anything that enters, it defines "done" and the do-nots for every run (Project instructions, or an AGENTS.md/CLAUDE.md).
  3. Skills are the room's procedures. They're the how for specific recurring tasks — loaded when relevant, so the method isn't re-typed.
  4. Subagents are the room's temporary staff (on surfaces that have them) — the who for one big job, spawned, scoped, collected, gone. Connectors are the room's reach — the doors the staff are allowed to open, each granted narrowly.

So "what do I equip to delegate the weekly-summary job?" has one composed answer, sized to your surface: a room to hold it, a brief in that room defining the summary format and what "done" means, optionally a Skill carrying your house summary method, subagents if your surface has them and a run is big enough to split, and the Drive connector if the notes and the output live in real folders. You set this up once. Then every Friday you hand over the job and review what comes back — which is exactly what Section 4 prepares.

The rule of thumb: equip the room so a competent stranger could run the job from it with no further instruction from you — because that's effectively what an unattended agent is. The moment you wish you could stand up many such rooms and run them in parallel under rules set once, the class has run out of room — that's the Level-Up signal (Section 13).


4. Preparation — Before You Engage

At Chat, preparation produced a one-line objective and a sorted pile of context for a single ask. At Delegate the stakes of preparation invert the effort: because you will review the finished deliverable, not each step, almost everything that can go wrong gets decided here, before the job runs. A vague brief doesn't produce a vague answer you can see is vague — it produces confident, finished, wrong work (the signature pitfall, Section 11). Preparation is where you earn the right to look away.

This is the Conductor's work — you're setting what runs, against what, and what "done" looks like before you set the tempo. Nothing gets delegated until the output of this section exists. Five moves.

1. Name the whole job and its "done" — not a question. At Chat you named an outcome you'd act on. Here you name a deliverable the agent will hand back finished, plus the explicit bar it's judged against. "Turn these three meetings of notes into a finished weekly summary with the decisions and owners" is a job. "Help me with my meeting notes" is a topic — and a topic delegated is a coin flip. The "done" definition is the load-bearing half: if you can't write what a good finished summary contains, you can't review one, and you certainly can't delegate one. If you can't state job + done in two sentences, the work isn't ready to hand over — that's a finding, not a failure (the Brief-Cost corollary, Section 2).

2. Run a one-minute scoping discovery on the job. A quick self-interview surfaces what the room and brief must carry so a fresh, unattended agent doesn't have to guess:

3. Scope the reach to the job — the new, level-specific move. This is the step Chat didn't have. Decide, deliberately, what standing access the run needs and grant no more:

Concretely, "narrow scope" looks like granting (in your connector settings) read access to one folder rather than your whole Drive, and no send/write scope at all unless the job needs it. The rule: grant the narrowest standing scope the job actually uses, because this scope is live across every unattended run, not just the one you'd watch. Over-granting here is the level's quiet version of the Connect pitfall.

4. Decide the review checkpoint up front. You're on the loop, not in it — so decide now where the loop closes. Is this an accept-or-redirect at the end job (review the finished summary, ship or send back)? Or does it warrant a mid-point check (eyeball the merged decisions before it formats and writes)? Naming the checkpoint before the run is what stops the second half of the signature pitfall: not actually reviewing the deliverable because it looks complete. A finished-looking artifact is the most dangerous output at this level — decide its review before its polish can disarm you.

5. Assemble it into the brief. Everything above is loaded into the room (Section 3): the job and "done" become the standing brief's core; the do-nots become its rules; the house method becomes a Skill if it recurs; the reach decision becomes the connectors and scopes the room uses. Preparation doesn't sit beside the engagement — it becomes the room the engagement runs in.

Output of this section — shown, not asserted. A written objective (job + definition of done) plus the assembled context and scoped access, ready to drop into the brief. For the running scenario:

OBJECTIVE (the job)
  Turn the three meeting-notes files (mon.txt, wed.txt, fri.txt) into one
  finished Weekly Summary I can review and ship — multi-step, handed back done.

DEFINITION OF DONE (the bar I'll review against)
  - One document, house format: a one-line header (meetings · decisions · actions),
    a Decisions list, and an Actions list.
  - Decisions: only ones actually made in the notes. "Held"/"deferred" items are
    labelled as such, NOT listed as decisions. A decision that was later reversed
    is reconciled to its FINAL state, with the change noted.
  - Actions: each has a named owner (or UNASSIGNED — never guessed) and, where
    stated, a date.
  - Overlapping points across the three meetings are merged, not duplicated.

CONTEXT TO ASSEMBLE (what the room/brief must carry)
  - The three notes — read from the `meetings/` folder (Drive connector).
  - Owner rule: owners are people named in the notes. If no owner is named,
    write "UNASSIGNED" — do NOT guess one.
  - Figure rule: never invent a number to fill a slot. If a figure wasn't stated,
    write "pending" and flag it.
  - "Done" != "discussed": a decision needs an explicit resolution in the notes.

REACH / SCOPE (granted standing, kept narrow)
  - READ:  the `meetings/` folder only.
  - WRITE: hand back the finished summary as a draft for my review.
           Do NOT write into other folders; do NOT send or share anything.

REVIEW CHECKPOINT (where the loop closes)
  - Accept-or-redirect at the end. I review the finished summary against the
    "done" bar above before it goes anywhere. (No mid-point check needed — the
    job is short and the output is fully reviewable in one read.)

That block is the artifact this section produces. It is also, almost verbatim, the standing brief from Section 3 — which is the point: at Delegate, good preparation is the room, written down before a single step runs.


5. The Workflow — Step by Step, Each Step Names Its OUTPUT

At Delegate level the workflow is not a conversation — it's a hand-off. You stop producing the steps and start producing the conditions under which an agent produces them: a brief, a room, and a definition of done. Then you go on the loop (reviewing, redirecting) instead of in it (typing each turn). The pipeline below is what stands between "I delegated a whole job" and "I got back confident, finished, wrong work."

The rule that makes it delegation, not abdication: no step without a named output — and the two heaviest outputs are written down, not held in your head. The brief and the review verdict are artifacts. If they live only in your intent, you didn't delegate a job; you gambled on one.

Step What you DO OUTPUT (feeds next step)
1. Brief Define the whole job, the inputs, and what "done" looks like — in writing A standing brief (job + done-criteria)
2. Set up the room Assemble the room/folder, the input files, and the Skills the job needs A loaded room + equipped Skills
3. Delegate Hand the brief + room to the agent; set what it may do unattended vs. must surface A running job with a stated autonomy boundary
4. Monitor Watch progress against the brief's steps; catch a wrong assumption early, not a wrong deliverable late A go / redirect signal mid-run
5. Review Judge the finished deliverable against the done-criteria — spot-check the load-bearing claims against the source A reviewed deliverable + a verdict
6. Accept or redirect Ship it, or hand back a scoped correction naming the specific gap An accepted artifact, or a redirect brief

The running example carried end to end: you hand over a whole job — "Turn these three meetings of notes into a finished weekly summary with the decisions and owners" — and Claude works the steps (reads all three, merges overlaps, pulls decisions, assigns owners, formats) and hands back a finished summary for you to review and accept.

Step 1 — Brief → a standing brief (job + done-criteria)

This is the highest-weight artifact in the whole level. Delegation quality lives or dies here: a vague brief doesn't get you a vague answer (the Level 1 failure) — it gets you a confident, finished, wrong deliverable that cost the agent ten minutes to build and costs you twenty to unpick. The brief names four things: the whole job (not the first step), the inputs (which files, where), the shape of the deliverable, and what "done" looks like as checkable criteria — because at this level you judge the finished result, and you can't judge against a bar you never wrote.

Here is the brief for the running example — this is the output of the step, not a description of it:

JOB
Turn three meeting-notes files into one finished Weekly Summary.

INPUTS
- mon.txt, wed.txt, fri.txt (in this room). These are the only sources.
  Do not pull in anything outside these three files.

DELIVERABLE
A single "Weekly Summary" document:
  - A header line: "<n> meetings · <n> decisions · <n> actions"
  - DECISIONS (one line each, with the source meeting cited)
  - ACTION ITEMS — each with a named OWNER (or UNASSIGNED) and, where stated, a date
  - OPEN QUESTIONS / unresolved threads
Keep it under one screen. Plain, skimmable, no preamble.

DONE LOOKS LIKE
- Every decision traces to a line in one of the three files (cite [Mon]/[Wed]/[Fri]).
- Every action item has an owner field. If a note didn't name one, write
  "UNASSIGNED" — never guess a name.
- No figure is invented to fill a slot. If a number wasn't stated, write
  "pending" and surface it in Open Questions.
- Overlaps across the three meetings are merged, not duplicated.
- A decision and its later reversal are reconciled to the FINAL state, change noted.

FLAG, DON'T GUESS
If an owner, a date, a figure, or a decision is ambiguous across the notes,
surface it in "Open Questions" rather than inventing a resolution.

WORK LOG
As you work, list each step you take, and tag every claim with the file it
came from, so I can see the run, not just the result.

Notice what the done-criteria buy you: the lines "every action item has an owner field; if a note didn't name one, write UNASSIGNED — never guess" and "no figure is invented to fill a slot" are the difference between a reviewable deliverable and a plausible fabrication. The brief pre-loads the review. The WORK LOG line is what makes the run legible later (Section 7).

Step 2 — Set up the room → a loaded room + equipped Skills

The agent runs inside the room you give it — that is the level's boundary made physical. Assemble three things: the room/folder (a Project or project folder the job lives in, so the next run starts where this one ended), the input files dropped in (the three notes), and any Skill the job needs encoded once so you don't re-explain it every run.

For the running example the room is light: a "Weekly Summaries" Project, the three note files, and — because this is a repeating job — a small weekly-summary Skill that carries the format and the owner-handling rule so future weeks inherit them without a fresh brief. (You make a Skill by writing these instructions as a named SKILL.md in the Skills area of your surface — or, in Claude Code, a skills/ folder — and Claude pulls it in when the job calls for it.)

SKILL: weekly-summary
- Output format: header count line / Decisions (cited) / Action items (owners) /
  Open questions.
- Owner rule: never infer an owner; write UNASSIGNED if not stated.
- Figure rule: never invent a number; write "pending" if not stated.
- Reconcile reversals to final state; note the change.
- Source discipline: only the files in this room; tag every claim with its file.

A Skill is the brief's repeatable spine, lifted out of the one-off prompt and parked in the room. The first run you write the brief; from the second run the Skill is most of the brief, and you only state what's different this week.

Step 3 — Delegate → a running job with a stated autonomy boundary

Hand over the brief plus the room, and — this is the Conductor's move — state what the agent may do unattended versus what it must stop and surface. Concretely, you type (or paste) this instruction into the room's chat, with the brief and files already loaded — the same chat box you know from Level 1, now pointed at a room instead of an empty window. At Delegate level the default autonomy is "do the whole multi-step job within this room, on these files," and the boundary is "surface anything that would require inventing a fact."

Run the weekly-summary job on mon.txt, wed.txt, fri.txt in this room,
following the brief. Work all the steps end to end and hand me the
finished summary. Stop and ask only if an owner, a figure, or a decision
is genuinely ambiguous across the notes — don't guess to keep moving.

The output is a job that is now running its own steps — reading, merging, extracting, assigning, formatting — with a line you can point to that says where its autonomy ends.

Step 4 — Monitor → a go / redirect signal mid-run

Being on the loop means watching the run unfold against the brief's steps and catching a wrong assumption before it hardens into a wrong deliverable. You are not re-doing the work; you're scanning the visible progress for the one drift that would poison everything downstream. The run surfaces its steps as it goes — Reading all three sets of notes → Merging overlapping points → Pulling out the decisions → Assigning owners → Formatting — and that trace (which your brief's WORK LOG line forced) is your monitoring surface.

The signal you're producing is a single mid-run call:

Mid-run, you see: "Assigning owners — defaulting unnamed action items
to the meeting organizer."

REDIRECT (now, not after): "Stop — don't default unnamed owners to the
organizer. Mark them UNASSIGNED per the brief. Re-do the owner pass."

Caught here, it costs one line. Caught at review, it means re-reading every action item to find which owners were invented. That is the whole reason monitoring is its own step.

Step 5 — Review → a reviewed deliverable + a verdict

Now you judge the finished deliverable against the done-criteria — the Verifier hat, still worn under the Conductor's. The discipline here is the level's quiet killer: because the output looks complete, the temptation is to skim it and accept. A finished-looking summary is a claim that the work was done right, not proof of it. You don't re-read every keystroke; you spot-check the load-bearing claims — the ones a decision will hang on — against the source files, not by re-asking the agent.

Here is the deliverable that comes back, and the review run against it:

WEEKLY SUMMARY                                              [Done]
3 meetings · 5 decisions · 6 actions

DECISIONS
1. Phase 1 scope locked. [Mon][Wed]
2. Launch held at Mar 14 (revised from Mar 7 set on Mon). [Wed]
3. Marketing budget approved at $48,000 with a 10% contingency. [Wed]
4. Vendor shortlist cut to two. [Wed]
5. Hiring freeze lifted for the data role. [Fri]

ACTION ITEMS
- Send revised launch plan — Owner: Priya — due Mar 3 [Wed]
- Circulate locked Phase 1 scope — Owner: UNASSIGNED [Mon]
- Get two vendor quotes — Owner: Marco — due Wed [Wed]
- Post the data-role req — Owner: Dana [Fri]
- Confirm the contingency line with finance — Owner: Priya [Wed]
- Book launch-readiness review — Owner: UNASSIGNED [Wed]

OPEN QUESTIONS
- "Launch" date: Mar 14 (Wed) supersedes Mar 7 (Mon) — confirm with the team.
REVIEW (against DONE-criteria):
✓ Decision #1, #4, #5 each cite a source meeting. PASS.
✓ Decision #2 reconciles the Mar 7 → Mar 14 reversal to final state + notes it. PASS.
✓ Two actions correctly left UNASSIGNED, not guessed. PASS — this is the catch
  Step 4 protected; it held.
⚠ Decision #3: "$48,000" is a load-bearing number (money). The brief says never
  invent a figure. SPOT-CHECK against wed.txt before accepting — open the file,
  confirm the figure exists; do NOT ask the agent to "confirm its own source."
? Action "Get two vendor quotes — due Wed": "Wed" is ambiguous (which Wed?).
  Should have surfaced as an open question, not assigned a vague date.

→ Open wed.txt. It says: "Marketing budget approved — add a 10% contingency,
  finance to confirm the base figure." The base number was NEVER stated.
  The "$48,000" appears in NO meeting. The agent had a "budget approved"
  decision and a format that wanted a number, so it manufactured a plausible one.

VERDICT: Accept with two redirects —
  (1) strike the invented $48,000; write "base figure pending finance";
  (2) move the ambiguous vendor-quote date to Open Questions.

The verdict is the artifact: not a feeling that it "looks good," but a line-by-line pass/flag against criteria you wrote in Step 1, with the load-bearing number checked outside the agent, in the source file. That fabricated specific — a round, confident figure inside a finished doc — is the level's signature failure (Section 8); the canonical workflow catches it here, in the spine.

Step 6 — Accept or redirect → an accepted artifact, or a redirect brief

Two exits, and you name which. Accept: the deliverable clears the criteria; you ship it and the room (with its Skill and files) becomes the reusable context for next week's run. Redirect: hand back a scoped correction that names the specific gaps — never a vague "try again," which restarts the whole multi-step job and re-rolls the parts that were already right.

REDIRECT (scoped, from the review verdict):
"The summary is good — keep all of it except two fixes.
(1) Decision #3: the $48,000 base figure is in no meeting. Replace with
'Marketing budget approved with a 10% contingency; base figure pending finance.'
(2) The vendor-quotes action: 'due Wed' is ambiguous; move it to Open Questions
as 'vendor-quote deadline unclear — confirm.'
Don't touch anything else."

That redirect changes two lines; everything that passed stays. The accepted artifact — the corrected finished summary plus the room that produced it — is the walk-away.

The pipeline in one breath: standing brief → loaded room + Skills → running job with an autonomy boundary → mid-run go/redirect → reviewed deliverable + verdict → accepted artifact or scoped redirect. The two heaviest stones are the brief (Step 1) and the review verdict (Step 5) — write those down and the level holds. Skip either and you're back to gambling on finished-looking work.


6. Goals → Considerations Map

Three jobs recur at Delegate level. They share the spine — brief, room, delegate, monitor, review, accept — but each bends it at a different joint. Match your real intent to the variant instead of running the pipeline blind, because where a job is fragile decides which step earns the weight.

Goal Considerations that bend the workflow How the workflow shifts
Synthesize / transform (turn raw inputs into one finished deliverable — the running summary, a digest, a merged report) The risk is fabrication and false merging: an invented owner or figure, a duplicated point read as two, a reversed decision left in its old state. Inputs are bounded and known. "Good" = every line traces back to a source. Brief (Step 1) carries the weight: source-discipline ("only these files"), the no-guess rules (UNASSIGNED over invented owner, "pending" over invented number), and reconcile-to-final. Review (Step 5) is a traceability check — spot-check that load-bearing claims trace to a real source line. Monitoring watches the merge/assign steps specifically.
Run a repeatable process (the same multi-step job over fresh inputs each cycle — weekly summaries, a recurring report, an inbox triage routine) The job is stable; the inputs change every run. Re-briefing from scratch each time is the waste this level exists to kill. The risk is drift across runs — the format or a rule quietly slips week to week. Room + Skills (Step 2) carry the weight: encode the brief once as a Skill in a standing room so each run inherits it; the per-run prompt shrinks to "run it on this week's files." Review (Step 5) adds a consistency check against last run, not just against criteria. Step 1 is mostly reused, not rewritten.
Multi-step build / production (produce a worked artifact through several dependent steps — a board pack from a data file, a formatted doc from scattered notes, a populated template) Steps depend on each other, so one wrong early assumption cascades into a fully-built wrong thing. Highest cost of "wrong work done unattended." "Good" = the artifact is usable as-is, not just plausible. Monitor (Step 4) carries the weight: catch the load-bearing assumption at the early step before it compounds. Delegate (Step 3) sets a tighter autonomy boundary — "surface the structure/assumptions before building on them." Review then judges the built artifact against done-criteria, with a redirect scoped to the broken segment, not the whole build.

The tell that you've matched goal to variant: a synthesize run ends with every load-bearing line traceable to a source; a repeatable-process run ends with a Skill-backed room where next cycle is one prompt; a build run ends with the early assumption confirmed before the artifact was finished on top of it. The running summary is a synthesize job — which is exactly why its brief, not its monitoring, does the heavy lifting.


7. Connect the Components — Patterns & Outliers

A delegated job is not one answer you read — it's a finished deliverable built on a chain of steps you didn't watch. At Chat you read every turn as it landed; here Claude reads all three meetings, merges the overlaps, pulls the decisions, assigns the owners, and formats the summary before you look at anything. That's the bargain of the level — and the precise statement of its boundary, used identically everywhere in this module:

At Delegate level Claude runs multi-step work on its own, but only within the space, skills and brief you set up. You are ON the loop — reviewing, redirecting — not IN every step. You judge the finished deliverable, not each keystroke.

So "connecting the components" stops meaning read each reply in sequence and starts meaning reconstruct the chain from the artifact. The deliverable is the only thing you're handed; the steps that produced it are inferred. Your Conductor job is to read the whole engagement backwards from the output — to see, in a finished summary, the shape of the work that made it, and to catch where that work bent.

Track the run, not the turns

You can't pressure-test a step you never saw, but a competently-run agent leaves a trail — if your brief required one. The WORK LOG line from Step 1 is exactly that requirement; here's why it earns its place:

What to track across the run Where it lives What it tells you
The work log / step list The agent's progress trace ("Reading all three sets of notes → Merging overlaps → Pulling decisions → Assigning owners → Formatting") Whether the steps you briefed actually ran, and in an order that makes them sound
Source attribution Each claim in the deliverable tagged to its origin file ([Wed], [Fri]) Whether every output line traces back to a real input, or appeared from nowhere
The coverage count The deliverable's own header ("3 meetings · 5 decisions · 6 actions") Whether the inputs you handed over all got consumed — three files in, three files cited
Open questions / assumptions The section the brief forces the agent to surface Where the agent guessed instead of knowing — the highest-yield place to look

The discipline: before you judge whether the summary is good, judge whether the run is legible. A deliverable with no trail isn't finished work — it's a confident guess wearing finished work's clothes, and you cannot review it. That alone is grounds to redirect. (The one line that buys you the trail: "As you work, list each step you take and tag every claim with the file it came from.")

Patterns — promote them

A pattern is a regularity that survives the run and is worth keeping past this job. At Delegate the unit of capture is bigger than a single good answer — it's a repeatable piece of the process:

The tell of a real pattern: it held up under review and it will recur. Promote those into the room/Skills/brief and the level compounds — each run makes the next one cheaper. A pattern that's true once but won't recur is just a good outcome; capture it (Section 9), don't institutionalize it.

Outliers — interrogate them

An outlier is a finished-looking output that doesn't add up. At Chat the drift signals were hedging, self-contradiction, and an unsupported number — read live, turn by turn. At Delegate the dangerous drift is silent: it's already baked into a polished deliverable, so it reads as done. These are the concrete drift/anomaly signals for this level — what to scan a finished deliverable for:

  1. The confident, complete, un-briefed output. The summary covers a fourth topic you never handed over, or names an owner who wasn't in any meeting. The hallmark of delegated failure is a whole finished section built on something invented — fluent, formatted, and wrong. Confidence and completeness are not coverage; check the deliverable against what you actually gave it.
  2. Counts that don't reconcile. Header says "3 meetings"; the body only ever cites two files. Or "5 decisions" but you can find six in the notes. A coverage count that doesn't match the inputs means a step silently dropped data — an input never got read, or a decision got merged away.
  3. A figure, owner, or date that no source supports. "$48,000" in a decision line when the notes only said "budget approved, base figure to be confirmed." A specific, load-bearing field with no traceable origin is the delegated cousin of Chat's invented number: the agent filling a slot the format demanded rather than reporting a fact. (This is the running scenario's exact outlier — see Section 8.)
  4. A swallowed contradiction. Monday's notes set the launch at Mar 7; Wednesday's pushed it to Mar 14. A good summary surfaces the conflict and reconciles to the final state with the change noted; a drifting one silently picks one (usually the last it read) and presents it as settled with no note. Reconciliation that should have been flagged, wasn't.
  5. A missing assumptions section. Two unnamed owners, one undated action — and the deliverable flags none of it. Total absence of hedging across a genuinely ambiguous input is itself the anomaly: the agent resolved every gap by guessing and told you about none of the guesses.

How to interrogate without re-driving the whole job: don't re-run it, redirect it at the outlier. You stay on the loop, not in it.

Before I accept this — three checks:
1. The header says 5 decisions across 3 meetings. List each decision with the
   exact meeting file it came from. If any meeting contributed none, say so.
2. "Marketing budget approved at $48,000" — quote the line from the notes that
   states the $48,000 figure.
3. Monday and Wednesday give different launch dates. Which did you use, why, and
   is the change noted as the brief requires?

That turn is the Conductor move that defines the level: you didn't do the work and you didn't re-do the work — you read the deliverable as a whole, found where the chain bent, and sent the agent back to that one seam. The verified version of that is Section 8.


8. Qualitative vs Quantitative — Results Vary by Case

A delegated deliverable mixes two kinds of content, and they fail — and verify — in opposite directions. The summary contains facts lifted from your inputs (the launch is held to Mar 14; the budget carries a 10% contingency; Dana owns the data-role req) and judgments the agent made while running (which overlapping points to merge, which discussion rose to a "decision," who the implied owner is). Misfiling one as the other is how a confident, finished, wrong deliverable gets accepted.

And results vary by case: hand the same three files to the same brief twice and the merge can split differently, a borderline discussion can get promoted to a decision in one run and dropped in the next, an ambiguous owner can resolve to a different person. A run that came back clean last week is not a warrant for this week's run. That variance is exactly why you verify by type against the source — not by trusting that it worked before.

Quantitative / factual (a decision, owner, date, figure, count — lifted from your inputs) Qualitative / judgment (what merged, what counts as a decision, who the implied owner is, the framing)
What it claims This is what your meetings actually said This is the agent's call about how to organize what they said
The risk at this level A real input was misread, dropped, or invented to fill a required field — and it now reads as fact in a finished doc A defensible-but-wrong organizing choice silently shapes the whole deliverable (a real decision demoted to a note; two issues merged that shouldn't be)
How to verify Trace it to the source. Open the actual note file and confirm the line exists and says that Stress-test the reasoning. Ask why it merged/promoted/assigned as it did, and check that the call survives the question

Why "it ran" and "it sounds right" are not verification

This is the heart of the level. At Chat the seductive failure was fluent. At Delegate it's finished — and "finished" impersonates "verified" far more convincingly. Name the two false signals plainly:

The verification that actually counts at this level is therefore against the real source, not against the deliverable's own confidence. Concretely:

  1. For each load-bearing factual claim, open the input and find the line. Decision, owner, date, figure — the things people will act on. The check is deliverable → source file, one direction: does wed.txt actually state a $48,000 figure? You are not asking the agent whether it's sure. Asking the agent to confirm its own output is not verification — if it misread or invented the line, "are you certain?" usually returns the same fabricated line stated more confidently, because it's re-reading its own output, not your notes. The check must come from something that isn't the agent: the original file, opened by you.
  2. For each load-bearing judgment, make the reasoning visible and attack it. "Why did you record this as a decision and not a discussion? What in the notes made Marco the owner rather than Priya? Show me the two points you merged and why they're the same issue." A merge or promotion that survives the question is one you can ship; one that collapses under it was the agent filling structure, not reporting substance.
  3. Reconcile the counts to the inputs. Three files handed over, three files cited. Five decisions claimed, five decisions you can point to. The count is a cheap, high-signal cross-check that no whole step silently dropped your data.

One worked catch

The agent returns the finished Weekly Summary. It's clean — formatted, owned, dated. Under Decisions sits:

Decision: Marketing budget approved at $48,000 with a 10% contingency. [Wed]

Everything about it reads done. The number is specific, the contingency matches a real discussion, the source is cited. "It sounds right" — and it ran without error, so "it ran" too. Both false signals are firing green.

Verdict: keep "Marketing budget approved with a 10% contingency, base figure pending finance" (the source supports it); strike the $48,000 (invented); redirect the agent to mark unstated figures as pending rather than guessing them. The fluent specificity — a round, confident number in a finished doc — was the tell, exactly as at Chat. The difference is that here it arrived pre-baked into a deliverable that completed successfully, which is why neither "it ran" nor "it sounds right" could have caught it. Only the source could.

The rule for the level: a finished deliverable is a stack of claims to be traced, not a result to be accepted. Done ≠ correct; ran ≠ verified; sounds right ≠ is right. You verify the action and the data against the real source — because that's the only place the truth lives.


9. Recommendations → Plans

A delegated engagement has to produce something you can stand behind and reuse — not a transcript, not even just the deliverable, but a deliverable you've judged, with its trust on the record, and a brief that makes next week cheaper. Three moves turn the run into that walk-away artifact.

1. Assemble recommendations — tagged by trust

After the review (Sections 7–8), don't ship the summary whole. Decompose it into the actions it actually recommends, and tag each by how far it survived verification. The tag is the product — it's the difference between "I read it" and "I judged it." Carrying the running example through:

# Recommendation (from the deliverable) Type Trust tag Basis
1 Lock Phase 1 scope; communicate it to the team Judgment + fact ACT ON IT Traced to mon.txt/wed.txt; decision is unambiguous
2 Hold launch at Mar 14 Fact (with a reconciled conflict) ACT AFTER I CONFIRM Mon said Mar 7, Wed revised to Mar 14; agent reconciled and noted it — I confirm the live date with the launch owner before announcing
3 Marketing budget approved with 10% contingency Fact ACT ON IT Traced to wed.txt; supported
4 Budget base figure = $48,000 Fact (invented) DISCARD Appears in no source (Section 8 catch); replaced with "base pending finance"
5 Vendor quotes due "Wed" Fact (ambiguous) ACT AFTER I CONFIRM "Which Wed?" unclear across notes; moved to Open Questions, confirm the real deadline
6 Run this summary as a standing weekly job Process PROMOTE The brief + house-style Skill produced clean work; institutionalize it (move 3)

Tags, defined once and reused:

2. Line them into a plan — what's handed to Claude vs. kept by you

Sequence the surviving recommendations into an ordered plan, and on each line name the hand-over precisely. The level's boundary sets the split: Claude runs the multi-step work within the room and brief you set up; you stay on the loop, owning the calls that act on the real world.

Order Step Handed to Claude Kept by you (on the loop)
1 Strike the invented $48,000; mark base figure "pending finance" Edit the deliverable in place Confirm the fix landed
2 Resolve the ambiguous vendor-quote deadline Move it to Open Questions You confirm the real date with Marco
3 Confirm the Mar 14 launch date You confirm with the launch owner (acts on the real world)
4 Finalize the Weekly Summary with the confirmations folded in Re-format the corrected summary Accept it
5 Distribute the summary to the team Draft the distribution note You send it (sending acts on the real world)
6 Stand up next week's run Inherit the updated standing brief + Skill Decide it runs; review the next deliverable

The split is the level in one table: the assembling, formatting, drafting, and re-running — the multi-step labor — is Claude's; the confirming-against-reality and the irreversible acts (setting the live launch date, hitting send) stay yours, because those are calls, not keystrokes.

3. Capture the reusable context — the standing brief

The walk-away artifact at Delegate isn't only the finished summary — it's the standing brief that makes the next run start where this one ended. This is where the promoted patterns (Section 7) and the survived judgments land. A brief worth its name records the job, the "done," the promoted rules, and what stays yours — shown concretely:

STANDING BRIEF — Weekly Meeting Summary
(Claude.ai: paste into Project Instructions · Claude Code: save as CLAUDE.md)

JOB: Read this week's meeting notes (the .txt files in /meetings) and produce
one Weekly Summary deliverable.

DONE LOOKS LIKE:
- A header line: "<n> meetings · <n> decisions · <n> actions" — counts must
  reconcile to the files actually read.
- DECISIONS: each as a one-liner with the source meeting cited [Mon]/[Wed]/[Fri].
- ACTIONS: each with an owner (a real name OR UNASSIGNED) + due date where stated.
- OPEN QUESTIONS / ASSUMPTIONS: list EVERY inferred owner, unstated figure, or
  conflicting date. Never guess a missing number — mark it "pending". Never
  silently resolve a date conflict — reconcile to final state AND note the change.

RULES (promoted from prior runs):
- Launch dates usually live in the Wed/Fri notes; check there.
- Budget items need an explicit contingency call-out.
- Never invent a figure to fill a slot (the $48,000 catch — mark "pending").
- Use the "house-summary-style" Skill for formatting — don't re-derive it.
- Keep a WORK LOG: list each step and tag every claim with its source file.

WHAT'S MINE, NOT YOURS: do not finalize live dates, make owner assignments, or
send anything. Surface them for me to confirm.

That brief is the level's compounding asset: the verified judgments became rules, the invented-figure catch became a "mark it pending" rule, the date conflict became a "reconcile and note" rule, and the house style became a Skill the job carries. Next week you hand over three files and a brief that already knows where you got burned — and the only new work is the review.

The walk-away, in one breath: a judged deliverable → recommendations tagged ACT / CONFIRM / DISCARD / PROMOTE → a plan that names what Claude runs and what you confirm → a standing brief that makes the next run cheaper. That's a one-off delegation turned into a standing job — which is the doorway to the wish that bridges to Level 4 (Section 13).


10. Worked Examples

Three runs through the full template — brief → set up the room/Skills → delegate → monitor → review → accept or redirect. Each is a real Delegate-level job: one carries the running scenario end to end, one is the same shape on a higher-stakes deliverable, one is the recurring job that forces the level-up signal. Every prompt block below is a standing brief — written to a worker that will run the whole job unattended — not a single question. That is the difference from every example one rung down.

The Delegate-level reading test for all three: the brief defines the whole job and what "done" looks like before any step runs, and the run ends at a reviewed deliverable, not a transcript. If either is missing, you played Connect with extra steps.

Example A — The running scenario, end to end (three meetings of notes → a finished weekly summary)

The job from the demo: hand over the whole thing — read all three, merge overlaps, pull decisions, assign owners, format it — and get back a finished summary to review and accept.

Brief (define the whole job + what "done" looks like). This is not "summarise these" — it names the steps' shape, the deliverable's structure, and the acceptance bar, because at Delegate level you judge the finished thing, not each keystroke. (It is the same brief from Section 5, Step 1 — the canonical fact-set: 3 meetings, the launch reconciled Mar 7 → Mar 14, budget approved with a contingency but no stated base figure.)

JOB: Turn the three meeting-note files in this room (mon.txt, wed.txt, fri.txt)
into one finished Weekly Summary I can send to the leadership channel as-is.

DO, in order:
1. Read all three sets of notes in full.
2. Merge points that recur across meetings into a single line.
3. Pull out every DECISION and every ACTION ITEM as distinct lists.
4. Assign an OWNER to each action — the name the notes attribute it to.
   If the notes never name one, write "UNASSIGNED" — do NOT guess.
5. Format: header count line · Decisions (cited) · Actions (owner — task — date)
   · Open Questions.

DONE LOOKS LIKE:
- Header: "<n> meetings · <n> decisions · <n> actions", counts reconcile to files read.
- Every decision cites its source meeting [Mon]/[Wed]/[Fri].
- No action without an owner field (a real name OR UNASSIGNED).
- No invented figure — if a number wasn't stated, write "pending" and flag it.
- A reversed decision is reconciled to final state, with the change noted.
- Length: under one screen. Tone: plain, internal, no hype.
- WORK LOG: list each step; tag every claim with its file.

Set up the room/Skills. Drop the three note files into one Project so the worker has a standing room, and write the brief into the Project's Instructions so it travels with the job (not just this one message). No new Skill is strictly needed — Claude can already format and pull out items on its own — but if your org has a "weekly summary" house format, saving it as a Skill is what makes next week's run identical without re-briefing.

Delegate. Hand the room + brief to one worker and let it run the multi-step work — typed into the room's chat, files already loaded. This is the line the demo dramatises, the steps resolving into a deliverable:

[worker, working the brief]
▸ Reading all three sets of notes
▸ Merging overlapping points
▸ Pulling out the decisions
▸ Assigning owners
▸ Formatting the summary
→ returns: Weekly Summary [Done] — "3 meetings · 5 decisions · 6 actions"

Monitor (you're ON the loop, not IN every step). You don't approve each step. You watch for the two things that mean stop and redirect now rather than at the end: a step that silently changed the job ("I also reordered the decisions by impact" — you didn't ask for a judgment call) and a step that ran on a missing input ("mon.txt was empty, so I summarised the other two" — a quiet scope change you must catch live). Everything else, you let run.

Review the deliverable (the step the level lives or dies on). The returned artifact is the one shown in Section 5: header 3 meetings · 5 decisions · 6 actions, the launch reconciled to Mar 14, two honest UNASSIGNED owners — and one planted defect: Decision #3 states "$48,000," a figure in no meeting. Grade against done: every decision is cited (good); two actions are honestly UNASSIGNED not guessed (the brief working, not a failure); the reversal is reconciled and noted (good). The catch you must make as Verifier is the one the workflow made in Section 5 — open wed.txt, confirm the budget figure was never stated, and strike it.

Accept or redirect. Not a reject — a surgical redirect, the Conductor's move:

Good — accept the structure, owners, citations, and the launch reconciliation.
One fix: the $48,000 base figure is in no meeting (wed.txt only says "base figure
to be confirmed by finance"). In Decision #3, replace "$48,000" with
"base figure pending finance". Leave everything else.

The worker re-runs that slice and returns a deliverable you ship. Accepted output: a sendable weekly summary, every action owned-or-flagged, every figure traceable or marked pending. Captured for reuse: the brief itself, now proven, becomes the room's standing brief for next week — the job runs again on fresh notes without you re-writing any of it.

Example B — Same shape, higher stakes (a quarterly board pack from raw inputs)

The running scenario's mechanics, scaled to a deliverable where confident-but-wrong is expensive — which raises the bar on the brief and the review, not the number of steps.

Brief. The escalation over Example A is entirely in the done clauses, because the Wrong-Answer Cost is high:

JOB: Assemble a Q2 board pack from the files in /board-q2 (the P&L export,
the OKR tracker, last quarter's pack). Produce: a 1-page exec summary +
a metrics table + a "risks & asks" section.

DONE LOOKS LIKE:
- Every number in the pack is copied from a source file, with a cell/sheet
  reference. NO number is computed or estimated by you unless I asked for it,
  and any computed number shows its formula.
- Quarter-over-quarter deltas are shown as (this Q / last Q / % change).
- The risks section lists ONLY risks named in the source notes — do not invent
  plausible-sounding risks to fill the section.
- Anything you could not source from a file goes in a "GAPS — I need these"
  list at the top, not silently omitted or filled.

Set up + delegate. One room, all source files, the brief saved as a Skill if board packs recur. Hand it over; let it run read → extract → compute deltas → draft → format.

Monitor + review. The high-stakes review is quantitative-first (Section 8): every number gets traced to its cell, because a single fabricated figure in a board pack is the level's signature failure made expensive — the exact $48,000-shaped error from Example A, now in front of a board. The worker returns the pack plus a GAPS block:

GAPS — I need these:
- Net retention for Q2 is not in any source file. Left blank, did not estimate.
- The OKR tracker has no owner for KR-3; risks section flags it as unowned.

That GAPS block is the deliverable doing its job: it surfaced the holes instead of papering over them with plausible numbers. Redirect: you supply net retention, confirm KR-3's owner, send one corrective turn. Accept: a board pack where every figure traces to a source and every gap was declared, not disguised.

Example C — The recurring job that forces the level-up (weekly, across many rooms)

The job that ends the class. You've run Example A four weeks running and it works. Now the wish arrives.

Brief (now standing, not one-shot). You write the brief once and want it to govern every future run without re-issuing it:

STANDING BRIEF (lives in /weekly-ops):
Every Monday, turn that week's three meeting-note files into the Weekly Summary
using the house-summary-style Skill. Same DONE rules as always: owners or
UNASSIGNED, cite the source meeting, never invent a figure (mark "pending"),
reconcile reversals to final state, keep a WORK LOG, under one screen.

The friction that is the whole point. You can delegate this one job beautifully. But you have five of these — the weekly summary, a support-ticket digest in another room, a competitor-watch in a third — and at Delegate level you still kick each one off and review each one yourself, room by room, on the loop for every job. The run works; the system doesn't scale. You catch yourself writing the wish that is the exit signal (stated canonically in Section 13). Example C isn't a failure to fix — it's the class telling you it has run out of room. The brief that travels with one job wants to become rules that govern a whole system — which is the next class.


11. Pitfalls

Delegate-level failures divide into two kinds, and the dangerous ones are in the second. The first kind bites in a single run and you see it immediately. The second kind only bites across a longer engagement — a brief reused for weeks, a deliverable accepted on a glance — and by the time you notice, you've shipped a month of confident, finished, wrong work. The signature pitfall sits in that second kind: a vague brief returns confident, finished, wrong work, and because it looks complete you don't actually review it. That is the whole class's failure mode in one line; the table breaks it into its parts.

# Pitfall Symptom Why it happens The fix (and the hat it restores)
1 The vague brief (signature pitfall) A finished, polished, well-formatted deliverable that is confidently wrong — built on an assumption you never set You handed over the work but not the job: no definition of "done", no acceptance bar, so the worker filled the gaps with its own guesses and ran multi-step on top of them Conductor. A Delegate brief defines the whole job and what "done" looks like before anything runs (Section 4). The finished-and-wrong output is the cost of the missing done clause — write it first.
2 Rubber-stamp review (signature pitfall's twin) You skim the deliverable, it looks complete, you accept — the error was real but cosmetically invisible Polish reads as correctness; a formatted, owner-tagged summary looks done whether or not it's right Verifier. Review against the brief's done clauses, tracing load-bearing claims to the source (Section 8) — not against vibes. The level's bargain is that you judge the finished deliverable, so the review is the work, not a formality.
3 Driving instead of delegating You approve every step, correct every keystroke, and the "delegation" takes longer than doing it yourself You're standing IN every step instead of ON the loop — playing Connect with an agent attached Conductor. Brief well enough to let it run; monitor for the two stop-signals (silent scope change, missing input), not every step. If the job isn't multi-step/repeatable enough to let run, it failed the Delegation Test (Section 2) — do it yourself.
4 Stale standing brief (bites only over time) A brief that worked for weeks starts producing subtly off deliverables; the format no longer matches reality The job drifted (a new meeting type, a renamed owner, a changed metric) but the brief that travels with it didn't — it's silently governing against last month's reality Navigator. A standing brief is an asset that rots — this is its real cost (Section 3). Re-read it whenever the job's inputs change, and version it. The thing that makes Delegate scale is the same thing that lets stale rules run unattended.
5 Unbounded scope creep across runs Each run the worker "helpfully" adds a little — reorders by impact, infers a priority, rewrites a heading — and three weeks in the deliverable has quietly become something you didn't ask for No done boundary on what NOT to do, so small judgment calls accrete run over run; each looks reasonable alone Conductor. Put the negative space in the brief ("do not reorder", "do not add risks not in the notes"). Then a deviation is a redirect signal, not a feature.
6 Wrong work done unattended (the new risk this level accepts) A whole finished output — every step executed — built on one wrong assumption made early, never surfaced because no step asked you The worker resolved an ambiguity by guessing instead of flagging, then ran more steps of correct work on top of the wrong guess Verifier. Make the brief force the flag: "if any input is missing or ambiguous, stop and list it — do not guess." The GAPS/UNASSIGNED/"pending" discipline (Sections 9–10) converts a buried wrong assumption into a declared one you catch.
7 Trusting a fabricated specific in a finished deliverable A precise figure, owner, or date appears in the polished output that exists in no source file (the $48,000) Same hallucination risk as every level — but now pre-formatted inside a deliverable that looks authoritative, so it slips past Verifier. Verify quantitative claims against the source files, not by re-asking the worker (Section 8) — asking it to confirm its own number is not verification. Every figure traces to a source line, or it's "pending".
8 No reusable context after a good run You delegate the same job from scratch every week, re-writing the brief each time You treated the brief as a message, not as an artifact that lives in the room Navigator. Capture the proven brief into the room as its standing brief (Section 9). The entire payoff of Delegate is that a job, once briefed well, runs again without re-briefing.

The one reflex under all of them: a finished deliverable is a claim that the whole job was done right — review it as one. At Delegate level the danger isn't a wrong sentence on screen; it's a wrong job, completed, formatted, and waiting to be shipped because it looks done.


12. Practice + Self-Check

Reps on the two muscles that make or break this level: the brief and the review. Run one full delegation now — about 20–30 minutes — then grade it against the rubric. The rubric is the instructor; everything it asks for is defined in this module.

Setup — where to do this (so the practice is executable)

On claude.ai: click Projects in the left sidebar → New project; name it; open Instructions and paste your brief; upload your input files into the project. "Hand it to one worker" = type your delegate prompt into a new chat inside that project (the same chat box from Level 1, now with the room loaded). On Claude Code: make a project folder, write the brief into a CLAUDE.md, drop the files in, and run the job from the terminal. Either way the shape is identical: a room holds the job, a brief defines "done," you type the go.

The starter task (do it now)

Pick a real multi-step job from your work that passes the Delegation Test (Section 2) — multi-step AND repeatable AND result-reviewable. (A single question is a Chat task; one fetch is a Connect task — pick something with at least three steps and a deliverable you'd actually use.) If nothing fits, use the house job: drop three real meeting-note files (or three long email threads) into a Project and run the running scenario.

  1. Brief (8 min). Write the standing brief before you hand anything over. It must contain: the whole job as ordered steps, the deliverable's exact shape, a DONE-LOOKS-LIKE block with at least one acceptance clause and one negative-space clause ("do NOT…"), the forcing rule "if any input is missing or ambiguous, stop and list it — do not guess," and the WORK LOG line.
  2. Set up + delegate (2 min). Put the inputs in one room with the brief, hand it to one worker, let it run the whole job. Do not approve individual steps.
  3. Monitor (passive, during the run). Watch only for the two stop-signals: a silent scope change, or a step run on a missing input. Redirect live only if one fires.
  4. Review against the brief (8 min). Take the returned deliverable and grade it clause by clause against your DONE block. Trace every number/owner/date to a source file. Find the one error that would hurt most if shipped.
  5. Accept or redirect (3 min). Send one surgical corrective turn at the largest gap ("accept everything except X; fix just X because Y"), then accept the re-run. Capture the proven brief into the room as its standing brief.

Self-check rubric (gradable from this module alone)

# Criterion How to verify it (look at the brief, the deliverable, your review) Pass bar
1 You briefed the whole job, not a question The brief names ordered steps AND a deliverable shape — not a single ask A newcomer could run the job from your brief without asking you anything
2 You defined "done" before delegating A DONE-LOOKS-LIKE block exists with ≥1 acceptance clause and ≥1 "do NOT" clause "Is it done?" is answerable by checking the brief, not by feel
3 You let it run (didn't drive) You did not approve or correct individual steps; you only redirected on a stop-signal, if at all You were ON the loop (reviewing/redirecting), not IN every step
4 You forced ambiguity to surface The brief told the worker to stop-and-list missing/ambiguous inputs; the deliverable shows a GAPS / UNASSIGNED / "pending" list (or honestly none were needed) No load-bearing assumption was made silently — gaps are declared, not guessed
5 You reviewed the deliverable against the brief Your review checked the output clause-by-clause against DONE, and traced every quantitative claim to a source file You can name which claims you verified externally and which you accepted as judgment (Section 8)
6 You caught or cleared the costliest error You identified the single highest-cost defect and either fixed it via redirect or confirmed it absent Nothing shipped that fails a DONE clause; a fabricated specific (the $48,000) would not have survived
7 You redirected surgically Your corrective turn named what to keep AND the one slice to change — not "try again" The re-run changed only the targeted slice
8 You captured a reusable standing brief The proven brief now lives in the room, ready to run the job again on fresh inputs Next week's run needs new inputs, not a new brief

Scoring. 8/8 — you delegated and reviewed like a Conductor; read Section 13. 6–7 — solid; the usual misses are a thin DONE block (#2) or a rubber-stamp review (#5) — re-run and force those. 5 or below — you're driving, not delegating: most often #1 (you briefed a task, not a job) or #3 (you approved every step). The signature failure hides in #2 and #5 together — a vague brief that returns finished-looking wrong work you don't really review. If you missed both, that is the level's signature pitfall; re-run with a DONE block and a clause-by-clause review.


13. Level-Up / Exit Criteria — Bridge to the Next Class

You don't graduate Delegate by feeling like a manager. The feeling of a clean, finished deliverable landing in your lap is exactly what the signature pitfall counterfeits. The gate is behavioural.

The exit gate — you've mastered Delegate when you consistently, unprompted:

You can… What it looks like The hat
Brief the whole job, not the work You write ordered steps + a deliverable shape + a DONE block before handing anything over Conductor
Define "done" as testable clauses Your brief has acceptance clauses and negative-space ("do NOT…") clauses, not just an instruction Conductor
Let it run You stay ON the loop — you don't approve individual steps; you redirect only on a stop-signal Conductor
Force ambiguity to surface Your briefs make the worker stop-and-flag missing inputs instead of guessing; gaps come back declared Navigator
Review the deliverable as a claim You grade the finished output clause-by-clause against the brief and trace every specific to a source Verifier
Redirect surgically Your corrective turns name what to keep and the one slice to change — never "try again" Conductor
Bank the brief A proven job ends as a standing brief living in the room, not a message you'll re-type Navigator

A blunt self-test: could you hand a colleague one of your standing briefs and a folder, and trust the deliverable that comes back — because the brief makes "done" checkable and the gaps self-declaring? If yes, you're out of Senior Management. One marker worth naming: at the entry to this level you either drive every step (no real delegation) or rubber-stamp the result (no real review); at the exit you've calibrated — you let the work run and you judge the finished thing hard, and you know the brief is what buys you both.

What the gate does NOT require: you haven't failed because you still kick off and review each job yourself, one room at a time (that is the level's design — you're on the loop per job). You haven't failed because you can't set rules that run many jobs in parallel unattended (that's the next class). Hitting those walls is graduation, not failure.

The signal you've outgrown it

One unmistakable tell — a specific, repeated wish (this is the canonical statement; Sections 3 and 10 point here rather than re-quote it):

"I keep wishing I could set the rules once and have it run many of these jobs in parallel across my whole system — and only pull me in when one trips a rule I set — instead of kicking off and reviewing each one myself, room by room."

When briefing-and-reviewing one job at a time becomes the slow part — when you have five good standing briefs and the bottleneck is you, serially on the loop for each — the class has run out of room. That wish is the thesis asserting itself again: the more you let Claude reach, the more you can hand over. You've handed over each job; now you want to hand over the orchestration of all of them.

The hand-over you're trading up for

Level 3 — Delegate / Cowork (Senior Mgmt) Level 4 — Orchestrate / Code (Leadership)
Verb Delegate Orchestrate
Reach A standing room + skills + a brief that travels with one job A whole system, with written rules many parallel agents obey
Claude's posture Runs multi-step work within the room/brief you set up Runs broad and parallel against your system under your policy
Your loop position ON the loop — reviewing, redirecting per job On it via rules, reviews, and gates — out of it on individual steps
Your job Conductor — tempo, what runs, what's reviewed Navigator + Conductor — you set policy and orchestration, not keystrokes
What you hand over A whole job A whole system of jobs, governed by rules set once
New risk you accept Wrong multi-step work done unattended Wrong work at scale, in parallel, fast — one bad rule amplified across agents

The catch worth naming before you go: once many agents run in parallel under standing rules, a single bad instruction stops being one wrong deliverable and becomes wrong work at scale, fast. That's why Level 4 leads with rules and gates — the written brief that governed one job becomes the policy (AGENTS.md / CLAUDE.md) that governs a system, and the review you did per deliverable becomes the human-gate before merge. The brief-and-review discipline you built here is the exact prerequisite that keeps parallel orchestration from amplifying your mistakes.

A note on the top rung

Level 4 has no "next class" — it is the summit. So mastery there is not a further rung; it's depth in orchestration. The Delegate skills you're carrying up — a precise brief, a testable DONE, a hard review — don't change shape at the top; they multiply. At Leadership you write them once, as rules, and a grid of agents obeys them in parallel. Going up was about reach; the top is about how well you wield it.

Hand-off

Next: open Claude Code and direct several agents at once — that's Orchestrate.

Carry three things forward: the brief discipline (a parallel agent with a vague rule fails faster, across your whole system, not just one deliverable), the review-the-deliverable reflex (at scale it becomes the gate before anything merges — wrong work now lands in parallel), and one proven standing brief from this level — bring a job you delegated well here, and let Level 4 be the thing that turns it from a brief you run into a rule that runs itself, many times over, under your watch. Same Conductor, same hard review — now pointed at a whole system instead of one job at a time.