Two teams, one model

Consider a hypothetical comparison. Two teams use the same model and ask for a briefing on a key account. The first receives a fluent paragraph that cites a contract clause belonging to a different customer. The second receives four sentences tied to the actual opportunity record: the renewal date, the open escalation, last quarter's disputed invoice, and an explicit note that two of the figures are estimates rather than confirmed values.

In this illustration, the underlying model is held constant. What changed was the machinery around it — which records it could read, what those records mean in the business, whose entitlements governed the query, which tools it could call, and what the answer had to satisfy before anyone saw it.

That machinery is what separates a demonstration from a system, and it is where enterprise AI programmes quietly succeed or quietly fail.

What the intelligence around the model consists of

It helps to name the levers separately, because they are purchased, configured and governed by different people.

  • Context selection. Which documents, records and fields are assembled for a given request, and which are deliberately withheld.
  • Planning and decomposition. Whether a task is answered in one pass or broken into sub-questions that can be checked individually.
  • Tool access. Whether the system can only read, or can also query a database, run a calculation, execute a test or write a record.
  • Scoped memory. What persists between interactions, for whom, and for how long.
  • Validation. What checks the output — schema, policy, test suite, human approval — before it is acted upon.
  • Workflow. The sequence of steps, retries, escalations and stop conditions around each call.

Model capability and orchestration work together. Useful results depend on both the reasoning service and the context, tools and checks surrounding it. The platform provider, integration team and business owner share responsibility for making those parts work.

Four documented examples, and what each one teaches

1. Orchestration and parallel research

Anthropic’s June 2025 account of its Research system describes a lead agent delegating independent investigations to subagents and combining their findings. Its internal evaluation showed an improvement over a single-agent baseline, alongside substantially greater token consumption. The practical lesson is to match the research structure and effort to the task. The authors also describe coordination and reliability challenges. This is a documented vendor engineering example, not a Bordy benchmark or proof that adding agents improves every task.

2. Purpose-built interfaces and executed tests

The 2024 SWE-agent paper investigated how an agent’s interface to its environment affects software-engineering performance. Its purpose-built commands supported repository navigation, file editing and program execution, including tests. The study provides evidence that the working interface and feedback loop matter alongside model capability. Its historical benchmark results are not a current product ranking. For a software buyer, the relevant question is whether the proposed integration can inspect the project, make an authorized change and observe actual validation results.

3. Repository instructions and a prepared environment

GitHub's onboarding guidance for its coding agent makes the same argument from an operational direction (GitHub Blog). It emphasises repository-level instructions that tell the agent how the project is built and tested, a prepared environment where dependencies and test suites can actually run, and the ability for the agent to see build and test results and iterate before proposing a change.

The implication for buyers is unglamorous. A reproducible build, meaningful tests and explicit conventions give the agent a firmer basis for useful work. Undocumented setup or unreliable tests make it harder to distinguish a correct change from a plausible suggestion.

4. Application context in a business system

Microsoft's documentation for record summarisation in Dynamics 365 Sales describes Copilot producing summaries from the account and opportunity records held in the application, subject to the deployment's configuration and the user's data access (Microsoft Learn). The summary is grounded in the CRM's own data model rather than in whatever the model happens to recall.

That is a modest capability with a large principle behind it: the business meaning of a record — what a stage represents, which fields are authoritative, what a closed-won date actually implies — lives in the application, not in the model. The model is not omniscient about your pipeline, and no amount of parameter count changes that.

Baked-in application intelligence: a working definition

Pulling those examples together, an application has baked-in intelligence when five properties hold.

  1. Authorised records and rules. The system reasons over data the requesting user is entitled to see, filtered by the application's own rules rather than by an instruction in the prompt.
  2. Business meaning. Domain semantics — statuses, effective dates, approval stages, commission bases, entitlement rules — are encoded in the application and supplied to the model, not inferred by it.
  3. User and tenant boundaries. Isolation is enforced in the data and API layer. A prompt that says 'do not show other customers' data' is a request; a query that cannot return it is a control.
  4. Validated structured output. Responses are constrained to a schema the application checks, so a missing field is a rejected response rather than a plausible paragraph.
  5. Permitted actions. The system may invoke a defined set of functions with defined side effects, and anything outside that set is unavailable by construction.

These controls give the model relevant information and make its output more checkable. They can improve usefulness and expose mistakes; they do not eliminate uncertainty or guarantee correctness.

Illustration one: an account briefing that can be checked

Illustrative only. No real customer, account or figure is described.

Consider a commercial briefing request for a manufacturing account. A model-only answer draws on general familiarity with the company's name and produces something plausible and unverifiable. An application-grounded answer looks structurally different:

  • Contract renewal date: taken from the agreement record, with the field name shown.
  • Open support escalation: pulled from the case system, with the case identifier and the date it was opened.
  • Billing dispute: referenced from the invoice record, flagged as unresolved at the time of the query.
  • Usage trend: computed from the last four quarters of data, with the calculation stated.
  • Explicit gap: 'No renewal forecast is recorded in the system; the figure below is an estimate based on the standard term.'

The last bullet is the important one. Baked-in intelligence does not only supply data; it declares what it does not have. Separating recorded values from estimates makes the briefing easier to check against its sources. Mixing them without labels makes that review harder.

Illustration two: a coding loop with verifiable evidence

Illustrative only. Not a description of a delivered engagement or a measured result.

A defensible engineering loop has six stages: inspect the repository and the failing behaviour; plan a change and state what success will look like; edit; run the project's own checks; inspect the failures; submit for review. The loop is only as good as stage four.

This is the sharpest distinction in the whole field. A model stating that tests pass is not evidence that tests pass. The test runner’s exit status and logs, the actual code diff and the checks performed provide evidence that a narrative alone cannot supply. Where an agent can execute and observe, its output is checkable. Where it can only describe, its output is a claim.

Code quality also means business correctness. A change can compile while applying the wrong commission base, rounding currency incorrectly or exposing another tenant’s records. Acceptance should cover the business rule, authorization and tenant boundaries, relevant failure paths and meaningful test evidence. Passing a build is one check; it does not prove that the application behaves correctly.

An observed integration: NewsForge and Bordy

One concrete example of orchestration sits inside our own publishing operation, and it is worth describing precisely because it is unremarkable in the way good infrastructure should be.

NewsForge submits article and social-copy requests to Bordy's authenticated Intelligence API. Each request carries a SQL-issued request identifier and a tenant and user scope, so a job can be traced to the person and organisation that initiated it, and conversation continuity is preserved across related requests. Research is queued rather than assumed synchronous, which means the calling system holds a job status rather than a hopeful connection. Responses come back as structured JSON against a defined schema.

The division of authority is the point. NewsForge stores job status, rejects incomplete output, validates required article fields and LinkedIn character limits, and retains exact-version approval and publishing authority. In this integration, Bordy returns a proposed draft while NewsForge controls approval, publication and delivery. An incomplete result retains its explicit status and cannot automatically become a publishable draft. A deliberate follow-up can address it.

Nothing in that description is a measured business result, and it should not be read as one. It is simply an illustration of the pattern: the model writes, the application checks, the human approves, the system records what happened.

Mapping the lessons onto a platform

Bordy's public descriptions are a reasonable place to test whether the framing above holds in practice, with the caveat that capabilities vary by product and by provisioning.

The chat offering at heybordy.com describes adjustable reasoning and optional in-depth research, selective personal memory, conversation transfer, shared rooms and channels, and image analysis. Read against the levers, those are context and memory features: what the system carries forward, who shares it, and how deep it goes when depth is warranted. Notably, memory is described as selective — a design choice that matters for data governance, because indiscriminate retention is a liability dressed as helpfulness.

The developer side at bordycode.com draws a distinction between Embedded Intelligence, aimed at application research, context, memory and workflows, and Developer Intelligence. The developer-intelligence description covers primary coding, a QA companion role, and hybrid engineering with coordination across models and specialists. That is the orchestration argument in product form: the value is in the arrangement of specialists and the surrounding workflow, not in a single call.

Two boundaries should be stated plainly. Capabilities, tool access and execution authority depend on provisioning. And the documentation at bordycode.com/docs requires product-specific contracts and provisioning rather than anonymous public API access — so no one should assume that every endpoint exposes every tool, or that private memory is available everywhere.

When more intelligence is not better

The orchestration story invites over-correction. More agents, more retrieval, more planning steps and more tokens are not automatically an improvement, and the primary sources are candid about this.

The research example above is a reminder that additional coordination can consume more resources. Use it where the expected benefit justifies the extra work, and measure cost and latency on representative requests rather than assuming every task needs the same process.

Practically, three questions decide whether to add machinery:

  • Is the task parallelisable? Independent sub-questions benefit from decomposition. A single lookup does not.
  • Does the consequence justify the cost? A contract review that prevents a bad clause and a chat reply about office hours should not carry the same orchestration budget.
  • Is there a measurable acceptance criterion? 'Better answers' is not a criterion. 'Resolves the ticket without escalation', 'passes the test suite', 'produces a schema-valid briefing with all five fields populated' are.

Latency deserves the same honesty. Planning, tool calls and validation all take time, and a buyer who is promised richer reasoning is also buying a longer wait unless the workflow is designed to hide it. For simple, high-volume requests, a fast constrained path usually beats an elaborate one — and the discipline of building both is what separates a mature programme from an enthusiastic one.

Side by side

DimensionUnconnected model interactionConfigured application workflow
ContextWhat the user typed, plus general familiarityAuthorised records, defined fields, stated freshness
Business meaningInferred from wordingEncoded in the application and supplied
ToolsConversation onlyDefined functions with defined side effects
MemoryContext supplied in this interactionMemory according to configured scope and retention
OutputGenerated text or structured outputOutput checked against configured schema and business rules
VerificationReader judgementTests, policy checks, human approval
AuditTranscript, if retainedLinked requests, tool results and checks where implemented
Cost profileDepends on model and contextAdditional steps may add cost; apply configured budgets

What to ask before you buy

  • Which records can the system read, and is that enforced in the data layer or described in a prompt?
  • How are user and tenant boundaries implemented, and can they be demonstrated independently of model behaviour?
  • What persists as memory, for whom, and how is it deleted?
  • Which tools can it invoke, what are their side effects, and who approves the consequential ones?
  • Is the output constrained to a schema, and what happens when a required field is missing?
  • Can the system execute real checks — a test suite, a policy validation, a reconciliation — or only describe them?
  • What is logged, in what retention period, and can it be exported for an auditor?
  • What does your evaluation measure: the quality of the prose, or completed work against system state?
  • What happens to in-flight work when we suspend the system?
  • What does the orchestration cost at our expected volume, and what ceilings apply?

Conclusion

Model selection remains important. Enterprise teams also need to evaluate how the selected model receives context, uses tools and fits into their application’s rules. A stronger model and a well-designed orchestration layer are complementary investments. The practical advantage comes from connecting that capability to the information and work the business actually needs.

The documented examples point the same way from different directions. Orchestration improved research outcomes at a measurable cost. Purpose-built interfaces and real test execution turned a language model into something that could iterate against reality. Repository instructions and a prepared environment made a coding agent useful. Configured application data grounded a summary in the business's own records. In every case the model was necessary and insufficient.

The organisations that get this right will not be the ones with the most agents, the longest prompts or the largest token budget. They will be the ones whose systems can answer, for any given output: what was it allowed to see, what was it allowed to do, what checked it, and where is the record. Those are answerable questions. They are also the ones that turn an impressive demonstration into an operational capability a board is willing to stand behind.