AI · automation · ops8 weeks discovery → pilot → expand
AI on the boring office work — so owners get back to growing the business
The highest-ROI AI work is rarely the flashy chatbot. It is the repetitive office load — intake, document triage, invoice and form extraction, status chase, first-draft replies — that quietly burns owner and admin hours every week. We put proven copilots and cowork agents (Copilot Cowork, Claude Cowork, Grok where it fits) on that grind so leadership could spend time on expansion, customers, and hiring instead of copy-paste ops.
- Client
- Multi-location services business (anonymized)
- Sector
- Operations / professional services
- Era
- AI
Problem
Owners and senior staff were still the “system of record” for admin: reading PDFs, re-keying into spreadsheets and line-of-business tools, chasing missing fields, and drafting the same email variants. Headcount for pure admin was hard to justify; growth work kept slipping because the boring work never stopped. Off-the-shelf RPA demos looked cheap and failed on exceptions; an ungoverned ChatGPT tab created risk with no audit trail.
Approach
- Mapped the real office day: which tasks burned hours, which were rules, which needed judgment — and which the owner insisted on seeing personally.
- Picked 2–3 high-volume, high-pain workflows first (document/email intake → structured fields → queue or human exception), not a company-wide “AI transformation.”
- Chose the right coworker for each surface: Copilot Cowork inside the Microsoft 365 estate, Claude Cowork for long-document and multi-step desk work, Grok where speed and broad reasoning helped — never one model forced everywhere.
- Deterministic workflow backbone (Durable Functions / M365 connectors) with LLMs only for extraction, classification, and draft language — never as the only control plane.
- Human-in-the-loop on money, customer-facing sends, and anything irreversible; full audit of what the model proposed vs what shipped.
- Measured hours saved and error rate on a pilot team before expanding to other locations or process cousins.
- Handoff: runbooks, owners, and cost caps so the automation is an ops asset — not a consultant retainership.
Outcomes
- Pilot workflows cut repetitive admin time dramatically — owners and leads reclaimed calendar for sales, delivery, and expansion work.
- Faster cycle time on intake-to-system: fewer “stuck in inbox” items and cleaner data into systems of record.
- Exception queues replaced silent failure; staff reviewed edge cases instead of re-doing every item by hand.
- Clear ROI story for the board: hours returned per week × loaded cost, minus model and platform spend — the class of AI use case industry reports consistently rank among the strongest returns.
Stack
GrokClaude CoworkCopilot CoworkAzure OpenAIAzure Durable FunctionsMicrosoft 365 (mail, SharePoint, Forms)Document intelligence / OCRPower Automate where it fitEntra ID + audit logging
More details — see the playbook →Lesson. AI that attacks boring, high-volume office work pays faster than AI that only impresses in a demo. Automate the grind; leave expansion and relationships to humans who finally have time for them.
AI · agents · openclaw · hermes6–10 weeks select → secure → pilot → expand
OpenClaw and Hermes agents that actually run day-to-day business work
Open-source agent platforms like OpenClaw and Hermes are no longer demos — they can research, draft, schedule, update systems, and chase routine work on a loop. The opportunity for businesses is real: day-to-day activities that used to need a human at the keyboard can be delegated safely. The risk is also real: unbounded tools, weak identity, and no evals. We help teams pick the right agent stack, wire it to real workflows, and ship it under control — so agents help the business instead of becoming another unmanaged intern with production credentials.
- Client
- Growing product / services company (anonymized)
- Sector
- Operations · founder-led teams
- Era
- AI
Problem
Leadership had seen the noise: agents that “run your SaaS,” OpenClaw-style gateways for broad messy tasks, Hermes for fast execution, memory, and scheduled skills. Experiments on laptops worked for a week, then stalled — no tenancy story, no approval path for customer email or CRM writes, no one accountable when the agent loop burned tokens or took a wrong action. They needed help turning agent hype into day-to-day operational leverage.
Approach
- Inventory which day-to-day activities are agent-ready: inbox triage, research briefs, status updates, content drafts, CRM hygiene, recurring reports — vs what must stay human.
- Choose fit, not fashion: OpenClaw when a multi-channel / broad automation gateway and quick path-to-running matter; Hermes when multi-agent skills, persistent memory, scheduled jobs, and tighter execution loops fit better — often both in complementary roles.
- Design tool surfaces with least privilege: which APIs the agent may call, what is read-only, what needs human approval before send or write.
- Wire scheduling (cron / heartbeats) for work that should happen without someone opening a chat window every morning.
- Add observability, cost caps, and kill switches; store secrets in proper vaults — not .env files on a founder laptop.
- Pilot one or two live workflows with success metrics (hours saved, cycle time, error/escalation rate), then expand only what proves out.
Outcomes
- Agents handling a defined set of day-to-day activities on a schedule — with humans reviewing exceptions instead of doing every step.
- Clear split of labor: OpenClaw and/or Hermes where each is strong, not a religious single-platform bet.
- Security and ops baseline: approvals, logs, identity, and an owner who can disable the agent without a war room.
- A path the internal team can maintain — Hyper Mind designs, ships, and hands off; optional fractional support after go-live.
Stack
OpenClawHermes AgentTool integrations (mail, CRM, files, web)Scheduled / cron agent jobsPersistent memory where appropriateHuman-in-the-loop gatesAzure / Entra identity & secrets when hosted in-estate
More details — see the playbook →Lesson. OpenClaw and Hermes can automate real business busywork. The value is not installing the agent — it is scoping the work, constraining the tools, and running the loop like production software. That is the help we provide.
heritage · m&a · tenant-to-tenantPre-stage weeks · weekend domain & identity flip
Friday: two companies. Monday: one Microsoft 365 tenant
Imagine Friday you still have two separate companies. By Monday morning the acquired firm is live in the parent’s Microsoft 365 tenant — mail flowing under the new identity, historical email and files available, and the old tenant no longer the place work happens. Minimal user-facing downtime; the hard work was everything we pre-staged before the weekend.
- Client
- Acquiring enterprise + mid-market acquisition (anonymized)
- Sector
- M&A / professional services
- Era
- Heritage
Problem
Deal closed on a fixed calendar. Two tenants, two identity directories, overlapping SMTP domains, and a business expectation that “after the weekend we are one company” — not a six-month dual-tenant purgatory. Leadership would tolerate a short, planned freeze; they would not tolerate weeks of “check the other tenant” for mail and files.
Approach
- Treated the weekend as a flip, not a discovery window: inventory, identity mapping, UPN/SMTP plan, and coexistence rules locked weeks ahead.
- Pre-staged bulk mailbox and OneDrive/SharePoint content into the target tenant so cutover was delta + DNS/identity, not a cold copy of years of data.
- Domain cutover runbook: remove domain from source, verify at target, MX/Autodiscover/SPF/DKIM/DMARC sequenced with owners on a bridge call.
- Mail flow and free/busy tested in pilot cohorts; Teams and SharePoint path decisions explicit (migrate vs rebuild collaboration surface).
- Comms pack for end users: what changes Monday, what stays the same, where old mail lives, who to call — shipped before Friday close of business.
- Rollback criteria written in advance (even when the preferred path was commit-forward) so the bridge room was not inventing policy at 2 a.m.
Outcomes
- Acquired company users authenticated and worked in the parent Microsoft 365 tenant Monday morning with mail and core collaboration available.
- Historical email and file data available post-cutover — not “we’ll migrate archives later” left as a surprise.
- User-facing disruption limited to a planned weekend window; no multi-week dual-primary tenant for day-to-day work.
- Playbook documented for subsequent M&A moves: same stages, different seat counts.
Stack
Microsoft 365 tenant-to-tenantEntra ID / Azure ADExchange OnlineOneDrive / SharePointTeamsBitTitan MigrationWiz + native cutover toolingDNS / Autodiscover
More details — see the playbook →Lesson. Tenant-to-tenant success is identity, DNS, and pre-stage discipline. The weekend looks dramatic; the quiet weeks before it are what make Monday boring in the right way.
AI · agents · evals12 weeks discovery → ship
Production RAG + agent loop with evals before the feature flag flipped
A product team had a demo that impressed sales and scared engineering. We replaced “prompt hope” with retrieval contracts, golden evals, multi-model selection (Grok, Claude, GPT where each won), and an agent loop that could fail closed.
- Client
- B2B SaaS scale-up (anonymized)
- Sector
- Software / product
- Era
- AI
Problem
Prototype answered well on curated docs and hallucinated on customer tenants. No eval set, no tracing, no clear ownership of grounding vs generation.
Approach
- Scoped the first shippable path: retrieval-augmented answers with citations, not open-ended multi-agent sprawl.
- Built a golden set from real support tickets (redacted) + LLM-as-judge + human spot checks.
- Agent tools only where deterministic APIs existed; human-in-the-loop for irreversible actions.
- Observability: traces per request, prompt/version tags, cost and latency budgets in the release checklist.
- Feature flag + shadow mode against production traffic before customer-visible rollout.
Outcomes
- Feature shipped behind a flag with eval regression gates in CI.
- Hallucination rate on the golden set dropped to an agreed threshold before GA; citations required for product answers.
- Runbooks and ownership handed to the client’s eng team — no black-box retainership required to stay up.
Stack
GrokClaudeAzure OpenAI / GPTAzure AI SearchPostgres + pgvectorLangGraphOpenTelemetry + LangfuseGitHub Actions
Lesson. Demos prove possibility. Evals and traces prove you can operate it. Ship the second thing.
platform · azure6 months design + phased deploy
Azure landing zone and FinOps that cut hybrid infrastructure cost ~35%
Lift-and-shift pressure met a honest sizing exercise: right-size before migrate, retire what the cloud made redundant, and put cost ownership in the architecture — not a quarterly spreadsheet.
- Client
- Logistics enterprise (~7,000 employees, anonymized)
- Sector
- Logistics / operations
- Era
- Platform
Problem
On-prem farms (mail, collaboration, DR) were expensive and aging. A pure lift-and-shift quote looked cheaper on day one and more expensive every month after.
Approach
- Workload triage: rehost / refactor / retire — with explicit “stays on-prem for now” decisions.
- Hub-and-spoke landing zone, private endpoints for data plane, Entra ID as the control plane.
- IaC (Bicep) for repeatable environments; no snowflake subscriptions.
- FinOps from week one: tags, budgets, reserved capacity where utilization was proven, rightsizing loops after 30/60/90 days.
Outcomes
- ~35% average infrastructure cost reduction across the hybrid program (retired farms + rightsizing + license consolidation).
- Documented target architecture the internal team could operate without us in the critical path.
- DR simplified: fewer dual-datacenter ghosts, clearer RTO ownership.
Stack
Azure landing zonesHub-spoke networkingBicepExpressRouteAzure MonitorReservations
Lesson. Cloud savings are a design outcome. If you only migrate VMs, you migrate the bill with a new logo on the invoice.
heritage · migration11 months · hybrid coexistence
15,000-mailbox Microsoft 365 migration without a weekend firefight
A multi-domain government estate needed out of Exchange 2010 before support ended — with free/busy, mail flow, and identity surviving every cutover wave.
- Client
- State agency (anonymized)
- Sector
- Government
- Era
- Heritage
Problem
Legacy multi-domain Exchange, brittle federation, and a political calendar that forbade a single big-bang cutover. Prior “assessments” had stopped at mailbox counts.
Approach
- Assessment that treated network egress, ADFS cert lifecycle, and UPN cleanup as first-class work — not footnotes.
- Pilot cohorts with real rollback plans; hybrid coexistence until each wave was boring.
- Runbooks for free/busy, autodiscover priority, and on-call ownership during every migration window.
- Stakeholder cadence: weekly risk register, not slide decks of green checkmarks.
Outcomes
- 15,000+ mailboxes moved with zero data-loss incidents attributed to the migration path.
- Hybrid coexistence held for the long tail without becoming permanent dual-run debt.
- Playbook reused on subsequent agency and enterprise programs.
Stack
Exchange 2010/2013ADFSAzure ADMicrosoft 365BitTitan + native hybrid
Lesson. The tool (hybrid vs MigrationWiz) mattered less than the assessment and the rollback habit. Migrations fail in identity and comms, not in the mailbox copy.
// nextSomething like this on your plate?
Send a brief. We will tell you honestly if we are the right team — and what discovery would cover.