Internal triage and user self-service, engineered in parallel.

A client needed two LLM agents: one for internal ops triage, one for user self-service. Same agent loop and tool registry; different trust boundaries. The ops agent runs behind corporate SSO. The user agent can only access the signed-in user's data. Every write action goes through draft-preview-confirm. A full adversarial eval suite before the user agent touched a real session.