By NHI Mgmt Group Editorial TeamBased on Braintrust: “How to test agent cost-efficiency with Braintrust” (June 17, 2026)

TL;DR: The lowest-cost AI agent design is not the cheapest model, but the control logic that balances routing, retries, fallback, and escalation, according to Braintrust. The strongest policies resolved about 93% of tickets at lower cost per resolved request than the always-frontier baseline, while cheap-only strategies underperformed despite lower token spend.


At a glance

What this is: This is a benchmarking analysis of AI agent control logic that finds routing and escalation outperform simple model swapping for cost control.

Why it matters: It matters because teams governing AI agents need to optimise the whole decision path, not just model price, if they want safe outputs and predictable operating cost.


Context

AI agent cost control is not the same as model cost reduction. Once an agent can choose tools, retry, escalate, and fall back, the governing question becomes how control logic shapes both quality and spend across the full workflow.

For IAM, NHI, and agentic AI programmes, this is a governance problem as much as a technical one: runtime decisions determine who or what can act, when a stronger path is required, and how much unsafe or unsupported behaviour the system can absorb before human intervention.

A customer-support agent is a useful proxy because it combines model selection, tool use, response quality, and safety gating in one workflow. That makes the article relevant to agent governance beyond simple prompt evaluation, and the findings are typical of broader production agent systems rather than an edge case.


Key questions

Q: What is the biggest mistake teams make when trying to reduce AI agent cost?

A: They optimise the price of a single model call instead of the total cost of getting a request safely resolved. Cheap inference can increase retries, repair work, tool failures, and human cleanup, so the workflow becomes more expensive even when token spend falls. The right question is whether the whole control path stays within the quality bar.

Q: Why do routing and escalation often beat cheaper models for agent cost control?

A: Routing and escalation let the system spend more only on cases that actually need it. Easy requests stay cheap, while ambiguous, risky, or failed requests get stronger handling before they create downstream cost. That selective spend usually preserves quality better than a blanket low-cost model strategy.

Q: What are the signs that an AI agent policy is failing even if token spend looks low?

A: Look for rising retry counts, repeated fallback calls, unsupported statements, missed required steps, and manual cleanup after responses. Those signals show that the apparent savings are being consumed by recovery work. If the resolved rate falls while token spend improves, the policy is usually failing the real cost test.

Q: How should teams govern AI agent escalation policies in production?

A: Treat escalation rules as runtime governance controls, not static configuration. Define when the system may retry, fall back, or abstain, then tie those decisions to measurable quality gates and audit logs. That makes the policy reviewable and keeps the team from overusing either cheap models or expensive ones.


Technical breakdown

Why routing logic matters more than model price

A model is only one component in an agent workflow. Routing logic decides which model to call, whether to retry, when to fall back, and when to escalate or abstain, so it controls both quality and total spend. In production, a cheaper model can increase retries, repair prompts, tool misuse, and human cleanup, which pushes the real cost above the initial token bill. The right unit of analysis is therefore the workflow, not the model call. That is especially true when the agent must satisfy safety and completeness thresholds before a request can be considered resolved.

Practical implication: Measure agent cost at the workflow level, then tune routing and fallback decisions before assuming a cheaper model will lower spend.

Why cost per resolved request is the correct metric

Raw token cost misses the work required to make an answer production-safe. Cost per resolved request includes primary generation, retries, repair prompts, fallback calls, judge calls, and tool execution overhead. That metric aligns spend with the outcome the business actually receives, which is a resolved request that passes quality and safety gates. If a strategy looks cheap on tokens but fails often, its true cost rises quickly because the system spends more effort recovering from its own mistakes. This is why strict resolution criteria matter more than isolated inference pricing.

Practical implication: Track cost per resolved request alongside quality gates so the team can compare policies on the outcome that actually matters.

How escalation budgets change agent economics

Escalation budgets give the system room to spend cheaply on easy cases while reserving stronger models for ambiguous, high-risk, or failed paths. That produces a better cost curve than a static always-cheap or always-expensive policy because the agent adapts to task difficulty. The article's result is not that escalation eliminates failures, but that it concentrates stronger compute only where the marginal value is highest. That pattern is especially relevant for tool-using agents, where a small number of difficult cases often drives most of the remediation cost.

Practical implication: Use budgeted escalation policies for agent workloads that vary in difficulty, safety sensitivity, and tool complexity.


NHI Mgmt Group analysis

Control logic is becoming the real cost-control surface for AI agents. The article shows that model choice alone is too coarse once an agent can route, retry, escalate, and use tools. That shifts governance away from static model selection and toward runtime policy design, which is where both cost and safe behaviour are now determined. For agentic AI programmes, the lesson is that control logic is the operating model, not an implementation detail.

Cheap inference can create expensive remediation. The weak strategies in the analysis did not fail only by producing lower-quality answers. They also generated unsupported claims, extra retries, and recovery work that erased the apparent token savings. That is a familiar governance pattern in AI systems: the cheapest path at inference time often pushes cost into review, correction, and exception handling. Practitioners should treat hidden recovery cost as a core risk, not a downstream nuisance.

Runtime policy is the right place to express AI governance. Routing and escalation are effectively governance controls because they decide which capability is allowed to act under which conditions. That makes them relevant to NIST AI RMF-style accountability, but also to agent identity and authorisation thinking when an agent is allowed to use tools or escalate to stronger capabilities. The named concept here is escalation economics: the pattern where selective escalation lowers total cost while preserving the quality bar. Teams should govern agents at the point of decision, not only at deployment review.

Static routing rules are a weak substitute for adaptive control. The article's hand-authored router was serviceable, but it was more brittle than the escalation policies that reacted to failure and ambiguity in context. That matters because agent environments are dynamic: prompts change, tools change, and context quality changes. Governance that cannot adapt at runtime will keep overpaying for certainty or underpaying for reliability. Practitioners should treat routing as a living control, not a one-time configuration choice.

What this signals

Escalation economics: selective fallback is becoming a first-class design control for agentic systems because it shifts spend toward the small number of requests that actually need stronger reasoning or safer handling. Teams should expect runtime policy design to matter as much as model choice in any workflow where tool use, quality gates, and user-facing correctness all matter.

Cost control for agents is converging with governance control. Once routing decides when an agent may continue, retry, or escalate, the same policy also determines where human review, auditability, and safety assurance need to sit in the workflow. That makes agent operations a control-design problem, not a procurement problem.


For practitioners

  • Define cost per resolved request as the primary efficiency metric Include retries, repair prompts, fallbacks, judge calls, and tool execution overhead in the denominator so agent cost reflects production reality.
  • Test routing policies against a fixed quality bar Compare cheap, escalated, and rule-based policies on the same dataset, then require resolution thresholds for tool correctness, safety, and completeness.
  • Instrument escalation and fallback paths explicitly Log why a request moved to a stronger model, how many retries occurred, and which failure modes triggered escalation so policy drift is visible.
  • Use adaptive routing for mixed-difficulty workloads Reserve stronger models for ambiguous or high-risk requests while allowing low-risk requests to complete on cheaper paths with the same safety gates.

Key takeaways

  • The article shows that AI agent cost control is really a workflow governance problem, not a model pricing problem.
  • The strongest policies balance routing, retries, and escalation to keep quality high while lowering cost per resolved request.
  • Teams that optimise only token spend risk paying more through retries, failed tool use, and manual recovery.

Standards & Framework Alignment

This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.

OWASP Agentic AI Top 10 addresses the attack and risk surface, while NIST AI RMF, NIST CSF 2.0 and NIST SP 800-53 Rev 5 set the governance and control requirements practitioners need to meet.

FrameworkControl / ReferenceRelevance
NIST AI RMFMANAGE — AI Risk ManagementThe article is about governing runtime AI decisions that affect quality, cost, and safety.
Recommendation — Apply MANAGE to treat routing, retries, and escalation as governed AI risk controls.
OWASP Agentic AI Top 10ASI03 — Identity & Privilege AbuseAgent routing and tool use create decision points where capability and authority must be constrained.
Recommendation — Constrain tool use and escalation paths so agent privilege changes stay policy-driven and reviewable.
NIST CSF 2.0GV.PO-01 — Policies, Processes, and Procedures are Established and ManagedThe article centres on policy design for agent behaviour and cost governance.
Recommendation — Document and manage agent routing policies as formal procedures with measurable outcomes.
NIST SP 800-53 Rev 5IA-5 — Authenticator ManagementTool-using agents rely on managed credentials and controlled reuse of access paths.
Recommendation — Govern agent credentials and their lifecycle with IA-5 so runtime access stays bounded.

Key terms

  • Cost Per Resolved Request: A measure of how much it costs to complete a task successfully, not merely to generate a response. It includes retries, fallback runs, safety checks, and human cleanup, which makes it a better operational metric than token cost for agentic systems.
  • Escalation policy: A rule set that determines what happens when an alert is not acknowledged or resolved in time. It defines priority, notification order, and fallback responders, making it a governance mechanism as much as an operational one because it shapes accountability during incidents.
  • Routing Logic: Routing logic is the decision layer that determines which model receives a request. It can use rules such as task type, health status, latency, cost, or policy metadata. In production, routing logic helps teams move beyond static provider choice and apply repeatable decision criteria to every call.
  • Production-Safe Testing: Production-safe testing is validation that exercises live security controls without causing disruption, data loss, or operational risk. It allows teams to test email gateways under realistic conditions while preserving business continuity. This approach is essential when the objective is control assurance rather than a destructive attack exercise.

Deepen your knowledge

The NHI Foundation Level course, the industry's only accredited NHI security programme, covers NHI governance, agentic AI identity, and machine identity security. It helps practitioners connect runtime control decisions to the access and accountability model behind modern AI systems.
NHIMG Editorial Note
Published by the NHIMG editorial team on August 20, 2026.
Updated on October 12, 2026.
NHI Mgmt Group, the independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org