
Privacy-Safe Alternative for AI & Automation Exercises
Build and Test Your First AI Evaluation Agent
A privacy-safe, methodologically grounded approach to designing an AI-supported evaluation workflow.
What this tutorial changes
Instead of starting with a Make.com scenario and asking an AI model to produce text, you will start with an evaluation problem, construct an evidence base, define the analytical task, design the agent’s decision process, introduce validation and test how the system behaves when evidence is incomplete or contradictory.
1. Start with the evaluation problem, not the technology
A common mistake when building AI workflows is to begin with the available tool: ChatGPT, Claude, Make.com, Google Sheets or another platform.
For evaluation work, reverse the order.
The first question is therefore:
For this tutorial, use the following fictional evaluation question:
To what extent did the programme reach and serve its intended participants?
The purpose of the agent is not to decide whether the programme was successful. It is to support the evaluator by systematically examining the evidence relevant to the question.
2. Decide whether you actually need an agent
Not every AI-assisted task requires an agent.
| Type | Example | Agent required? |
|---|---|---|
| AI assistance | Suggest possible interpretations of a finding. | Usually no. |
| Automation | Send an alert when an indicator changes. | No. |
| LLM workflow | Send evidence to an LLM and receive a draft analysis. | Not necessarily. |
| AI agent | Retrieve relevant evidence, assess it against criteria, identify gaps, decide what requires further investigation and route uncertain cases. | Potentially. |
Design principle: Do not call something an agent simply because an LLM appears in the workflow. The architecture should earn the label.
3. Define the agent’s actual analytical responsibility
Now specify what the system should do.
Agent specification
Purpose: Support evidence assessment for an evaluation question.
Input: Structured and unstructured fictional evaluation evidence.
Process: Retrieve relevant information, classify evidence, compare sources, identify contradictions and gaps, and generate analytical questions.
Output: Traceable evidence assessment with uncertainty and recommended follow-up.
Escalation: Send ambiguous, contradictory or high-risk cases to human review.
Restriction: Never invent evidence or make unsupported causal claims.
4. Build a realistic evidence base
This is where many simple AI workflows become methodologically weak. If the evaluator supplies an already-cleaned evidence table containing the final findings, the AI has little analytical work left to do.
For this exercise, therefore, create a small but deliberately imperfect evidence base.
Synthetic evidence package
Monitoring record: 860 households were reached against a target of 1,000.
Staff interview: Programme staff reported delays in outreach activities in two implementation areas.
Participant interview: A fictional participant described the programme as useful but difficult to access.
Survey: 91% of respondents reported satisfaction with the programme. The response rate was 64%.
Programme document: The programme intended to prioritise participants in three underserved locations.
The evidence is intentionally incomplete. There is no evidence proving why the reach target was missed.
This creates an opportunity for the agent to demonstrate whether it can distinguish:
Observed evidence
Possible explanation
Interpretation
Evaluator judgement
5. Choose a privacy-safe environment
You do not need Google Sheets or Make.com to complete this tutorial.
Use synthetic data unless your organisation has explicitly approved the AI environment and the type of information being processed.
Option: Claude or ChatGPT
- Create a dedicated conversation or project for the exercise.
- Use only the fictional evidence package above.
- Paste the evidence into the conversation or upload a synthetic document if permitted.
- Provide the agent specification.
- Run the initial analysis.
- Introduce deliberately difficult cases.
- Review the results against the source material.
- Revise the system instructions.
- Repeat the tests.
Privacy boundary
Do not use confidential evaluation data, beneficiary information, personally identifiable information, unpublished reports, passwords, API keys or restricted organisational material simply to complete a training exercise.
6. Give the AI a methodological task
Instead of asking the model to “analyse the data”, provide explicit analytical responsibilities.
AGENT INSTRUCTIONSRole: You are an AI evidence-analysis assistant supporting a professional evaluator.
Objective: Analyse supplied evidence in relation to the specified evaluation question.
Instructions:
- Use only information supplied by the evaluator.
- Preserve the source of important claims.
- Separate evidence, interpretation, explanation and judgement.
- Compare evidence across sources.
- Identify convergence and divergence.
- Identify missing evidence.
- Identify contradictions and explain why they matter.
- Do not invent facts, sources, statistics or causes.
- Do not convert correlation or association into causation.
- When evidence is insufficient, state that explicitly.
- Identify issues requiring evaluator judgement.
For every major observation, provide:
- Evidence statement
- Source
- What the evidence demonstrates
- What it does not demonstrate
- Convergence or contradiction with other evidence
- Evidence limitation
- Possible interpretation
- What requires human judgement
- Recommended follow-up question
7. Preserve the evidence chain
A reliable evaluation workflow should preserve the path from source material to judgement.
Ask the AI to keep these stages separate.
| Stage | Example |
|---|---|
| Source | Monitoring record |
| Evidence | 860 households were reached against a target of 1,000. |
| Finding | Reported reach was below the planned target. |
| Interpretation | The programme did not achieve planned reach during the period. |
| Judgement | Requires consideration of the evaluation criteria and contextual evidence. |
This distinction becomes particularly important in reporting, recommendations and evaluative synthesis.
8. Introduce triangulation
Now ask the agent to compare the sources.
Add this instruction:
“Compare all supplied sources before producing the synthesis. Identify where sources converge, where they diverge, and what additional evidence would be needed to explain important differences.”
The AI might identify that:
- Monitoring data indicates that numerical reach was below target.
- Staff accounts indicate outreach delays.
- The participant account indicates access difficulties.
- The survey indicates high satisfaction among respondents.
These findings should not automatically be treated as contradictory. They may describe different dimensions of programme performance.
This is an important methodological distinction: triangulation is not simply asking an AI to compare four columns. The evaluator must determine whether the sources address the same construct, population, time period and analytical question.
9. Ask the agent to identify what it cannot know
This is a critical test of reliability.
Give the system this statement:
Ask:
Determine whether this claim is supported by the supplied evidence.
Classify it as supported, partially supported, unsupported or contradicted. Identify the evidence supporting the classification and specify what additional evidence would be required to establish the causal explanation.
The evidence mentions access difficulties and outreach delays, but it does not establish that transport problems caused the shortfall.
If the AI accepts the statement as fact, that is not merely a “bad answer”. It is a documented agent failure that needs to be addressed in the design.
10. Add conditional routing
A more meaningful agent does not simply produce an answer and stop. It can classify the state of the evidence and determine what should happen next.
→
AI assessment
→
Risk check
→
Pass / Flag
Example routing rules:
- PASS: Evidence is traceable and no major unresolved issue is detected.
- FLAG: Evidence is missing, contradictory, ambiguous or potentially overstated.
- HUMAN REVIEW: The evaluator decides whether the issue changes the finding or conclusion.
This is where the workflow begins to demonstrate genuinely useful agentic characteristics: the system is not merely generating text; it is assessing the state of the task and determining whether further action is required.
11. Test the agent with failure cases
Never evaluate an AI agent only with ideal examples.
| Test | Change the evidence | Expected behaviour |
|---|---|---|
| Missing data | Remove an actual result. | Flag missing information. |
| Contradiction | Give two sources different results. | Surface the contradiction. |
| Unsupported causality | Add a causal claim without evidence. | Reject or qualify the claim. |
| Context loss | Remove contextual information. | Identify the limitation. |
| Ambiguity | Provide evidence supporting two interpretations. | Present alternatives instead of choosing arbitrarily. |
12. Create an evidence-checking log
For every important AI output, compare the claim with the underlying evidence.
| AI claim | Source | Check | Action |
|---|---|---|---|
| Reach was below target. | Monitoring record. | Supported. | Retain. |
| Transport problems caused the shortfall. | No direct source. | Unsupported. | Remove or investigate. |
13. Introduce human methodological supervision
The evaluator should not simply approve or reject the AI’s final paragraph.
Human review should occur at the points where methodological judgement matters.
Identify patterns, compare evidence, surface gaps and propose questions.
Assess methodological relevance, evidence quality and contextual meaning.
Iteratively test, challenge and improve the analytical workflow.
14. Connect the prototype to the evaluation cycle
The same architecture can support different stages of an evaluation, but the methodological task changes.
| Evaluation stage | Potential AI role | Human responsibility |
|---|---|---|
| Evaluation design | Challenge assumptions and identify design gaps. | Select methods and justify the design. |
| Data collection | Support transcription, classification or structured extraction. | Determine appropriate collection and sampling decisions. |
| Qualitative analysis | Assist coding, pattern detection and contradiction searches. | Develop and revise the codebook and interpret context. |
| Quantitative analysis | Assist analysis, interpretation and anomaly exploration where appropriate. | Select analytical methods, verify calculations and interpret results. |
| Evidence synthesis | Compare sources and identify convergence and divergence. | Assess evidence strength and draw conclusions. |
| Reporting | Draft and structure evidence-based content. | Approve findings, judgements and recommendations. |
15. Only now consider Make.com
Once the analytical workflow has been tested manually, you can decide whether automation is useful.
Make.com can automate the movement of information between systems and trigger actions. It should not determine the evaluation methodology.
This distinction matters because an automation platform does not automatically make a workflow agentic.
A workflow that watches a spreadsheet row, sends a prompt to an LLM and writes the answer into another row can be useful. But its value comes from the quality of the underlying task design, not from the number of automation steps.
16. Understand the ChatGPT/API boundary
If you later connect an AI model through an automation platform, remember that this is a separate model interaction.
Important concept
Information developed in a ChatGPT conversation does not automatically become available to an AI model call made through Make.com. The automated call works from the information and instructions explicitly provided to that call.
Therefore, if a workflow requires evaluation context, definitions, evidence, coding rules, methodological criteria or previous analytical decisions, those elements need to be deliberately designed into the system.
Do not assume that the model “remembers what you discussed earlier” simply because you are using the same AI provider.
17. Build an agent test set
Before applying the system to real evaluation work, create a small benchmark.
| Test dimension | Question |
|---|---|
| Accuracy | Did the agent represent the supplied evidence correctly? |
| Traceability | Can important claims be traced to their sources? |
| Methodological validity | Did the agent follow the defined analytical rules? |
| Robustness | Does it behave appropriately when evidence changes? |
| Uncertainty | Does it recognise when evidence is insufficient? |
| Escalation | Does it correctly identify cases requiring human review? |
18. Record failures, not just successful outputs
An agent becomes more reliable through structured testing and revision.
Failure: AI inferred a causal explanation that was not supported.
Risk: Unsupported causal statement could become an evaluation finding.
Cause: Agent instructions did not sufficiently distinguish observation from explanation.
Improvement: Require direct evidence before accepting causal claims.
Retest: Repeat the same test and compare the result.
19. Your final challenge
Now design your own privacy-safe AI evaluation agent.
Choose one substantive evaluation task:
- evaluation design review;
- qualitative evidence analysis;
- quantitative analysis support;
- data quality assessment;
- evidence synthesis;
- indicator monitoring and early warning;
- recommendation analysis;
- learning synthesis.
Do not start by selecting Make.com modules. Start by documenting:
- The evaluation problem.
- The evaluation question or analytical objective.
- The existing human workflow.
- The methodological decisions involved.
- The evidence required.
- The role AI can safely perform.
- The decisions AI must not make.
- The information that must remain traceable.
- The validation rules.
- The conditions requiring human intervention.
- Three normal test cases.
- Three difficult or adversarial test cases.
- At least one expected failure.
- The improvement you would make.
- The retest result.
20. Final checklist
☐ I defined the evaluation problem before selecting the technology.
☐ I decided whether an agent was actually necessary.
☐ I used synthetic or authorised non-sensitive data.
☐ I defined the methodological task.
☐ I separated evidence from interpretation and judgement.
☐ I preserved source traceability.
☐ I introduced triangulation or cross-source comparison.
☐ I tested missing and contradictory evidence.
☐ I tested unsupported causal claims.
☐ I created a validation or quality gate.
☐ I defined when human review is required.
☐ I documented an agent failure.
☐ I improved the system based on the failure.
☐ I retested the improved system.
The agent is the designed system that connects an evaluation task, evidence, analytical rules, actions, validation, conditional decisions and human oversight.
