Six short posts cut from pages that already exist. One claim. One refusal. A live link. Copy them to Substack or X as they are. No fake metrics.
Note 1
Agentforce vs custom: three questions that decide it
Claim. You are not choosing a logo. You are answering where the users sit, where the system of record sits, and who must own the control plane.
Refusal. We will not quote Agentforce because a deck said “digital labor.” If the work is not in Salesforce, Agentforce is the wrong seat.
Share this
Three questions decide Agentforce vs a custom agent: where do the users already work, where does the record live, who owns the control plane. Hybrid is common. A partner who skips these is selling a demo org.
MCP is a connector standard, not a permission system
Claim. MCP lets a model call tools through one interface. That is useful. It is not auth, least privilege, or an audit trail.
Refusal. We will not treat an MCP server as a security model. Identity still sits in Salesforce sharing, your IdP, or IndyKite.
Share this
MCP is a bus, not a lock. Inventory the connectors. Scope them. Log them. Then decide permissions in the system that already knows who the user is. Point-to-point is fine for one agent and one API. The second runtime makes it debt.
Claim. Partner vetting moved from Summit-tier logos to “have you shipped an agent.”
Refusal. Walk if they quote a fixed price before a data-readiness pass, propose more than three agents in v1, call it Einstein Copilot, or show a demo org instead of a production method.
Share this
Red flags in an Agentforce pitch: fixed price before knowledge and permissions are checked; more than ~3 agents in v1; “Einstein Copilot” used as the product name; no transcript review after go-live; no written no. Ask the 40 questions.
Why we will not build more than three agents in v1
Claim. The first production agent teaches you grounding, identity, and ops. The fourth one multiplies the same unsolved problem.
Refusal. We will not staff a “digital workforce” program that starts with a portfolio. One use case. Then two more if the first one is reviewed in production.
Share this
If the first agent cannot inherit permissions or cite a source, ten agents will not either. We cap v1 at three. Context first. Platform second. The rest of the backlog waits until transcripts exist.
Claim. You need grounded, permissioned context before Agentforce or a custom runtime. Sometimes that is Data Cloud. Sometimes it is clean Knowledge and a sharing model that already works.
Refusal. We will not start configuration while the agent would see the wrong records. You get a readiness note, not a demo.
Share this
Data Cloud is not a checkbox. It is one way to ground an agent. The question is what the agent is allowed to see and whether that data is clean enough to act on. If the context layer is missing, the platform choice is theatre.
Claim. Pilots die on context, permissions, and ops — not the model. The sequence is assess, stabilize, then finish, cut, or rebuild.
Refusal. We will not add another model to a sandbox that never had an owner, a metric, or a transcript review. 47+ rescues. Same sequence for Salesforce orgs and AI pilots.
Share this
Stalled Agentforce / custom-agent rescue: 48-hour assessment, stop the bleeding, name the failure mode (context, owner, governance, integration), then finish, cut, or rebuild. Do not re-demo the same pilot.