
Challenge
Why it matters
Mitigation
Hallucinations
The model may generate plausible but incorrect code, commands, or reasoning, and then act on it.
Use validation gates and treat test results as a key indicator of correctness
Tool misuse
An agent can call the right tool with incorrect parameters or choose the wrong tool for the job.
Define precise tool schemas and limit available tools to least-privilege sets.
Context quality
Incomplete or stale context produces incorrect plans.
Pass targeted, task-relevant context rather than entire repositories.
Evaluation difficulty
Multistep outputs are harder to assess than single responses.
Define success criteria upfront, and use automated test results as evaluation checkpoints.
Latency and cost
Multistep chains consume far more tokens and time than single completions.
Set step budgets (a cap on tool calls or reasoning iterations per task, after which the agent pauses and reports status), cache stable context, and use smaller models for subtasks where appropriate.
Permission creep
Agents with broad tool access can make changes beyond the intended scope.
Enforce role-based permissions, and require explicit approval before destructive operations.
An AI system is agentic when it pursues a goal through a sequence of self-directed actions – interpreting objectives, gathering information, using tools, evaluating results, and adjusting its approach, without requiring a human prompt at each step. The key distinguishing behaviors are multistep execution, tool use, and adaptive replanning based on feedback.
Yes, within defined boundaries. An agentic system handles the intermediate steps of a task on its own, surfacing for human input only when it reaches a decision it is not authorized to make, encounters genuine ambiguity, or hits a configured approval step. How often it pauses depends on how you have scoped its permissions and escalation rules.
Tool access is what turns a wrong decision into a wrong action, so the risk scales with the reach you grant. An agent that can only read files and run tests can waste time; one that can merge, deploy, or call external APIs can do real damage when its reasoning is off. The lever that controls this is scope: Grant least-privilege access, require explicit sign-off before irreversible operations, and validate each result against defined criteria before the agent moves on.
Start with a single bounded workflow, like generating tests for one module or triaging a flaky CI job, and evaluate what the system handles well before expanding its scope. Junie's Ask mode is a practical low-risk entry point: Use it to plan a workflow and review the proposed steps before committing the agent to autonomous execution. Define success criteria upfront, set permission boundaries before the first run, and treat the test suite as your primary Indicator of correctness throughout.
Generative AI produces a single output in response to a prompt – a code snippet, a summary, an answer. Agentic AI pursues an outcome across multiple steps and tool interactions, maintaining state and adapting its plan based on what it finds along the way. The difference is between generating a response and completing a task.
Multistep, context-dependent tasks with defined success criteria work best. Strong examples include bug investigation and diagnosis, migration scaffolding, test generation for existing code, dependency audits, and CI failure analysis. Workflows with ambiguous goals, unpredictable tool availability, or high-stakes operations that need human judgment at every step are harder fits without careful design.
Yes. Agentic AI is built for integration with development environments, APIs, terminals, version control systems, CI/CD pipelines, databases, and project management tools. The range of integrations depends on the specific system and the permissions you grant it. JetBrains Junie, for example, integrates directly with JetBrains IDEs and can use the built-in test runner, debugger, refactoring tools, and version control integration as part of its agentic execution.
Damaso Sanoja is an engineer who is passionate about helping others make data-driven decisions to achieve their goals. This has motivated him to write numerous articles on the most popular relational databases, customer relationship management systems, enterprise resource planning systems, master data management tools, and, more recently, data warehouse systems used for machine learning and AI projects. You can blame this fixation on data management on his first computer being a Commodore 64 without a floppy disk.