Use case

Hand the workflow to an agent.

An agent takes the goal, plans the steps, and works the documents with governed tools: classify, extract, search, redact, convert, under checkpoints you set.

Plans multi-step work Atomic, governed tools Approval checkpoints Runs fully local

The work between systems is still done by hand.

Document workflows cross scanners, mailboxes, ERPs and archives. The steps in between are people copying values, or scripts that break on the first surprise.

  • Swivel-chair work. Skilled staff spend their day moving values between a PDF and a form field.
  • Brittle automation. Template scripts and RPA break on every new layout, and someone maintains the breakage forever.
  • All-or-nothing autonomy. Tools either do nothing without a person or too much without one; the checkpoint in between is missing.
  • Nothing to audit. When a workflow misfires, there is no record of what was read, decided or changed.

A goal in, a governed run out.

The agent brings the plan; the platform brings the rules. Neither works without the other.

01

Goal

The agent receives an outcome, not a script of steps.

02

Plan

It decomposes the work against the tools it is allowed.

03

Act

Each tool call is atomic, permission-checked and logged.

04

Approve

Risky actions pause for sign-off; the rest run through.

Autonomy that survives a security review.

Agents earn production access the same way people do: scoped permissions, sign-offs and a record of what happened.

Permissions

One tool, one decision

Every built-in tool is a single atomic operation with its own allow, deny and risk rules, so policy is precise.

Checkpoints

Human in the loop, by policy

Approval requirements attach to tools, not to hope: redaction, file writes or process execution can each demand sign-off.

Observability

Every step on the record

Plans, tool calls, inputs and results are observable, so a run can be audited and a failure diagnosed.

Tools registered, policy set, goal handed over.

Register the document tools, set the policy, hand over the goal. The same tools run governed on LM-Kit One, reachable over MCP.

DocumentAgent.cs
using LMKit.Agents;
using LMKit.Agents.Tools;
using LMKit.Agents.Tools.BuiltIn;
using LMKit.Model;

var model  = LM.LoadFromModelID("qwen3.5:9b");

var policy = new ToolPermissionPolicy()
    .AllowCategory("document", "data", "text")
    .RequireApproval("process_*");

var agent = Agent.CreateBuilder(model)
    .WithTools(t =>
    {
        foreach (var tool in BuiltInTools.GetByCategory("document"))
            t.Register(tool);
    })
    .WithPermissionPolicy(policy)
    .Build();

var result = await agent.RunAsync(
    "Split claim-batch.pdf and extract the claim fields.");

Console.WriteLine(result.Text);

Private Document Intelligence

Give an agent its first workflow.