From Frontier Ideas to a Working Agentic Pipeline
2026-07-15
The promise, stated on slide one.
Design philosophy — smallest viable practical. Not 18 agents and 52 skills. The minimum set of components that makes delegating research work to an AI agent both safe and productive. That minimum has five pieces.
Repository: github.com/lusiki/AI_workshop_wiiw — clone it this afternoon.
The technology is already inside the research production function.
Diffusion, at unprecedented pace
Chatterji et al. (2025) — population-scale usage across asking, doing, expressing, spanning work and personal life.
The canonical causal microevidence
Brynjolfsson, Li & Raymond (2025, QJE) — a customer-support deployment: average productivity +14–15%, gains concentrated among the newest workers, the skill distribution compressed.
These tools already change who produces knowledge work and how fast. For a research institute, the open question is not whether — it is deliberate vs accidental adoption.
This single framing carries the whole hour: the binding constraint is your verification, not the machine’s generation.
Tool · Instrument · Object
For wiiw: historical CESEE statistics, national gazettes and firm registries become tractable.
Ludwig, Mullainathan & Rambachan (2025, NBER) — the discipline paper. LLM outputs enter a pipeline two valid ways: prediction (needs an out-of-training-sample argument you cannot inspect) or estimation (needs a human-labelled gold-standard subsample). Otherwise measurement error contaminates estimates.
One rule for the room: no machine-generated variable enters a regression without a human-labelled validation set.
Lens A: these tools raise research productivity.
Lens B: they are dangerous inputs unless disciplined. Lens C: the stakes are macroeconomic.
Part 2 shows how to get the Lens A gains while enforcing the Lens B discipline.
The five components — and the failure each one prevents.
You write plain-language requests and approve plans. The agent does everything between approval and the verification report. You review the diff and say commit.
1 Context — CLAUDE.md
The project constitution the agent reads every session. Lean (~120 lines): principles, folders, commands, current state. Path-scoped rules load only when the agent touches matching files (R rules with any .R, house style with the manuscript).
Prevents: the agent forgetting decisions and reverting to generic defaults.
2 The plan gate
For any nontrivial task the agent plans in read-only mode, saves the plan to disk, and waits for approval. Plans survive context compaction and create an audit trail.
Prevents: solving the wrong problem fast — and losing the reasoning behind choices.
3 Permission-scoped execution
A settings file allowlists exactly which commands run without asking — Rscript, quarto render, read-only git. Destructive git, rm -rf, and reads under data/restricted/ are denied.
Prevents: an autonomous process with unbounded ability to touch the machine.
4 Verification
Never “done” without compiling, rendering or testing. Three mechanisms: replication-first, an adversarial critic → fixer loop, and numeric provenance — every quoted number anchored to the script that produced it.
Prevents: confident nonsense reaching the working paper.
5 Memory & git. Corrections accumulate as tagged one-liners (mistakes made once). Git is the safety net: small commits, an advisory quality score (80 to commit, 90 for a PR, 95 excellence), worktrees for risky experiments.
Context makes the agent competent · the plan gate makes it aligned · permissions make it contained · verification makes it honest · git makes it reversible.
Remove any one and a specific, nameable failure mode returns.
Extensions for later — skills, subagents, MCP servers — are refinements of these five. Start with the constitution and two or three skills.
A wiiw working-paper section, produced end to end.
Income convergence in the CESEE EU members since accession — a small staggered event study around the 2004 / 2007 / 2013 waves. Data public, econometrics familiar: all attention on the workflow.
eurostat → live data pullfixest (Sun & Abraham) + didmodelsummary tablesrenv pins versionstargets = one-command pipelineThe workflow guide and the modern DiD estimator in did share an author — Pedro Sant’Anna.
One plain-language request, planning first: “Extend the sample through 2025, refresh Figure 2, rerun the event study, and update the results paragraph.”
Rscript, quarto render, read-only git) proceed; destructive git and reads under data/restricted/ are blocked.Verification finds a results number — typed by hand — that no longer matches the refreshed table. The adversarial critic flags it, a separate fixer restores the code-backed reference, and the render passes clean.
The pipeline catches the error a tired researcher on a deadline would ship.
The loop then closes: git diff → advisory quality score → commit → the compiled, wiiw-branded PDF.
What it costs, in euros per month.
Local: a terminal, git, R, Quarto, a LaTeX distribution, Node.js ≥ 18 for Claude Code. No GPU. The repo ships a setup.R that checks all of it.
Two ways to pay (USD; verify at claude.com/pricing before the talk):
| Tier | Model | $ / 1M in | $ / 1M out | Use it for |
|---|---|---|---|---|
| Cheap | Haiku 4.5 | 1 | 5 | mechanical: formatting, first-pass scans |
| Mid | Sonnet 5 | 3 | 15 | review, drafting |
| High | Opus 4.8 | 5 | 25 | identification, high-judgment steps |
| Frontier | Fable 5 | 10 | 50 | hardest long-horizon work |
Batch processing −50% · prompt caching cuts repeated context to ≈ 0.1× input · Sonnet 5 intro pricing $2 / $10 through 2026-08-31. Subscriptions: Pro $20/mo ($17 annual) · Max $100 & $200 · Team ≈ $25 / $125 per seat.
Route by task — the 70/20/10 pattern
Saves half or more vs running everything on the frontier tier.
Two more levers
Honest order of magnitude: a full iteration of the demo pipeline plausibly costs low single-digit dollars on the mid tier at API rates. A subscription turns a working-paper habit into a flat, predictable line item. Monitor with the built-in cost commands — trust no table, including this one.
Plus one process rule: pin the tool version in a shared config so an overnight release cannot silently change behaviour mid-project.
What never to delegate.
Agents excel at
mechanical transformation · refactoring · formatting · first-pass literature scans · replication packaging · robustness sweeps
Humans keep
question choice · identification arguments · interpretation · ethical judgement · the final voice of the prose
Jones’s weak link is the researcher’s judgement — the complementary task that protects quality. Brynjolfsson–Li–Raymond: novices gain the most capacity, so senior researchers matter more, not less — review becomes the scarce input.
Clone it this afternoon: github.com/lusiki/AI_workshop_wiiw — paste the starter prompt, produce a compiled section on your own machine.
I am starting to work on [PROJECT NAME] in this repository. [Two sentences on the paper, the data, and the tools.] I want our collaboration to be structured and rigorous even when that takes longer. Please read
CLAUDE.mdand the configuration in.claude/, then propose updates that fit my project. Use the plan-first workflow for every nontrivial task. Once I approve a plan, proceed autonomously and return to me only for decisions or ambiguity. Verify every output by rendering or testing before reporting it complete. For our first sessions, check in more often so I can learn how the workflow behaves.
Full verified notes on all 15 papers: reading/PAPERS.md · Repository: github.com/lusiki/AI_workshop_wiiw