Skip to content
tensorix labs Discuss a project
Menu

The journal / Field notes

You Can’t Optimize a Workflow That Can’t Prove It Finished

A practical verification loop for showing what completed, what failed, and whether workflow changes improved the business result.

Most operational improvement starts with visible friction.

A team removes duplicate entry, shortens an approval path, connects two systems, or automates a repetitive task. The first gains are usually easy to see because the waste was easy to see.

Then the work changes.

The next constraint is often not another unnecessary step. It is the lack of trustworthy evidence about what happened across the complete workflow. The team can see that an automation ran, a ticket closed, or an API returned a success code. It cannot reliably show that the right business outcome occurred, that hidden rework did not increase, or that the improvement held after the process changed.

A workflow can become faster and less observable at the same time.

That is why operational improvement needs an audit loop. Not a compliance exercise or an annual inspection—a practical system that verifies completion, measures the resources required, surfaces exceptions, and checks whether the measurement itself can be trusted.

Here, “audit loop” is operating shorthand for monitoring, reconciliation, periodic review, and corrective action—not a formal assurance engagement. Often the next useful change is an identifier, a destination read-back, a reconciliation check, or a clear exception owner—not another platform.

Efficiency only means something when the outcome is defined

A shorter task is not necessarily a more efficient operation.

Efficiency describes the resources required to produce an acceptable outcome. Cycle time, throughput, automation rate, and utilization can help explain the operation, but none proves the result on its own.

The distinction matters:

  • Activity: a form was submitted, a call connected, or a job ran.
  • Handoff: a complete record reached the correct system and owner.
  • Outcome: the customer or business reached the intended next state.

Consider an inbound inquiry. A website may report a successful form submission. The integration may report a successful request to the CRM. Neither event proves that the CRM contains a usable record, the right person was assigned, a response occurred, or the inquiry reached a known resolution.

If the workflow gets faster at creating incomplete records, the activity metric improves while the operation gets worse.

This is why the U.S. Government Accountability Office distinguishes among process measures, outputs, and outcomes. Its guidance also treats cost-effectiveness as a comparison between the resources used and the outcome produced—not activity alone. (GAO, Performance Measurement and Evaluation)

A dashboard is not an audit loop

A dashboard summarizes what the instrumentation reports. An audit loop asks whether the report deserves to be trusted.

Those are different jobs.

A practical verification loop should test questions such as:

  • Does the workflow record include every eligible case?
  • Can one case be followed across every material system and handoff?
  • Do source and destination records reconcile?
  • Are apparently successful cases actually complete?

The Process Mining Manifesto makes a useful distinction between an assumed process and the behavior recorded in event logs. Conformance checking compares the model with what actually occurred. The principle applies even without a dedicated process-mining platform: compare the intended workflow with evidence from real cases.

The event trail, reconciliation check, and exception queue are operating controls. The audit is a separate, periodic or change-triggered test of whether those controls capture the right cases and work as intended. In a small team, “separate” may mean a cross-functional peer reviewing the evidence rather than a dedicated audit department.

Why local optimization stops telling the whole story

There is no universal ceiling on process improvement. A redesign or new technology can create a step change. But as teams repeat local optimization, the local metric can become a weaker guide to end-to-end performance for four reasons.

The constraint moves

Speeding up one step can create a queue at the next one. Automating intake may increase the burden on qualification. Faster approvals may expose a fulfillment constraint. The local metric may improve while total completion time does not.

Rework moves out of view

The original task gets shorter, but correction, reconciliation, support, or exception handling can grow elsewhere. If the measurement stops at the automated step, the additional work disappears from the efficiency calculation.

The proxy becomes the goal

When a metric carries enough consequence, people may adapt their behavior to improve the indicator rather than the intended outcome. Cases may be closed earlier, exceptions reclassified, or difficult work kept out of the measured queue. Donald Campbell described this corruption pressure in his work on quantitative indicators and program evaluation. (Campbell, 1979)

The lesson is not to avoid metrics. One practical response is to pair them, inspect real cases, and keep the intended outcome above the proxy.

The workflow changes faster than its definitions

Vendors update behavior. Teams add fields. Policies change. An AI model, prompt, or routing rule is replaced. The dashboard remains stable while the process underneath it becomes materially different.

At that point, yesterday’s measure may no longer describe today’s operation.

The minimum viable verification loop

The verification loop does not need to begin as a large governance program. Start with one bounded workflow and six elements.

1. Define success, failure, and ownership

State the unit of work, the intended result, acceptable terminal states, and the failures that require attention.

For an inquiry workflow, the unit might be one eligible inquiry. A valid terminal state might be an appointment booked, a prospect declining, a documented disqualification under an agreed rule, or no response after a defined contact policy. An assigned follow-up or open exception is not terminal; it still needs an owner, next action, and due date. “Webhook succeeded” is evidence of activity, not a terminal business state.

2. Establish a credible comparison

Before changing the path, capture enough of the current operation to compare later:

  • completed outcomes
  • incomplete or incorrect cases
  • end-to-end elapsed time
  • manual touches and rework
  • exception volume and age
  • operating cost where it can be measured credibly

A baseline is one comparison, not proof of causality. Use rates with clear denominators and segment material differences in case type. Where seasonality, demand mix, staffing, or other external factors could matter, a phased rollout, matched cohort, or holdout may provide a more credible comparison than a simple before-and-after view.

3. Track one case across the handoffs

Start with native identifiers, timestamps, histories, and destination read-backs already available in the systems. Give each case an identifier that survives the workflow. At each missing material handoff, record the event, timestamp, source, actor or system, resulting state, exception or override, and relevant workflow version. Preserve amendments rather than silently overwriting the earlier state.

Collect only what supports an operating question, and set access and retention accordingly. More logging is not automatically better; unnecessary personal data and noisy events create their own risk and maintenance burden.

4. Reconcile, do not merely observe

Compare evidence from distinct points in the inquiry workflow and, where possible, from an independent source:

  • source inquiries against CRM records
  • complete CRM records against assignments
  • assigned inquiries against a documented next action
  • “completed” cases against a sample of the underlying records

The important check is often a read-back from the destination, not the success response from the sender. That read-back verifies that data persisted in the destination; it still does not prove that the terminal business outcome occurred.

Start by reconciling the complete upstream population of eligible inquiries with the downstream records. Then review known critical exceptions and sample both upstream cases and reported completions. This two-sided check can reveal missing records, false successes, and workarounds that bypassed the designed path. A spot check is useful for discovery, but a population-wide error estimate requires a probability-based sample designed for that claim.

Make the review repeatable. Record the claim being tested, workflow version, period and population, evidence sources, selection method, pass or fail rule, reviewer, and result.

5. Use a small, balanced measure set

The minimum scorecard can start with three measures:

  • Outcome: What share of eligible inquiries reached an agreed terminal state?
  • Quality: Were the record and next action correct and usable, without avoidable rework?
  • Efficiency: How much end-to-end time, staff effort, and operating cost did a valid completion require?

Track exception age, missing events, duplicates, and definition changes as operating diagnostics behind that scorecard. A useful default is to pair a speed or automation measure with an outcome measure and a quality guardrail. DORA uses this pattern in software delivery by measuring throughput alongside instability rather than treating deployment frequency as the whole result. (DORA’s software delivery performance metrics)

6. Assign exceptions and verify the fix

An exception without an owner is only a notification. Assign severity, any immediate containment, a next action, an accountable person, expected timing, and an escalation path proportionate to the consequence.

Do not close the loop when the fix ships. Re-test the control after the change reaches production, then monitor whether the business result remains acceptable. For higher-consequence workflows, add independent review proportionate to the risk.

Review depth and frequency should reflect consequence, volume, detectability, and rate of change. Automated checks can run continuously. Operators can review exceptions on a regular cadence. A separate review should also follow material workflow, vendor, model, schema, policy, or ownership changes—and any unexplained shift in the measures.

Remove a measure or control when it no longer changes a decision. The goal is not maximum oversight. It is enough trustworthy evidence to make the next decision.

Build the ability to learn into the operation

A reliable workflow can show:

  • what entered the process
  • what happened at each material handoff
  • what completed
  • what failed or required recovery
  • what the outcome cost
  • whether results improved after a change—and, where attribution matters, whether the change produced the improvement

Optimization changes the workflow. The verification loop turns that change into a learning system.

Start with one workflow. Define one completed business outcome, one quality guardrail, and one measure of effort. Reconcile the real cases against the reported states. Then improve the constraint the evidence reveals.

If a critical workflow crosses several systems but cannot show what completed, what failed, and who owns the exception, start by mapping the handoffs and evidence.

Map a critical workflow.

Back to Journal
Share:

Tensorix Field Notes

Keep the useful
ideas close.

A twice-monthly note on the engineering and operating decisions behind reliable software and AI systems.

Receive Field Notes