TL;DR: FigmaTrace, a dataset of 3,469 Figma design trajectories spanning 200+ hours of human work, helps smaller open models match frontier systems on out-of-domain tasks and shows that phase-based trajectory curation outperforms maximum context-length sharding by 7.3 points on average, according to Patronus AI. The deeper lesson is that workflow structure, not just scale, is becoming a governance variable for agentic model training.
At a glance
What this is: This is a research dataset about Figma design workflows that finds intent-segmented trajectories improve model performance and generalise to broader agentic tasks.
Why it matters: It matters because teams building or governing AI assistants need to understand that training data shape, segmentation, and workflow fidelity can change capability, control, and evaluation outcomes.
By the numbers:
- FigmaTrace contains a total of 3,469 Figma design trajectories.
- The dataset spans 200+ hours of human design work across 10 creative skills.
- Patronus AI says the fine-tuned Qwen3.8-27B outperforms Claude Opus 5 on GUI-Odyssey and AndroidControl by 6.4 and 11.8 absolute points.
Context
Vision-language models still struggle when the task is subjective, creative, and dependent on sequence rather than final output. That gap matters for agentic systems because the hard part is often not seeing the interface but preserving intent across a chain of decisions, edits, and partial completions.
AI governance increasingly has to account for how training data is constructed, not only what the model can do at inference time. When workflow traces are realistic and segmented around task phases, the resulting system is easier to evaluate, but also more capable of acting beyond the narrow use case it was trained on.
Key questions
Q: How should teams evaluate agentic models trained on workflow data?
A: Evaluate them on the quality of the action sequence, not only the correctness of the output. The important questions are whether the model preserves intent across steps, handles corrections cleanly, and behaves consistently when the task becomes long-horizon or ambiguous. That approach reveals transfer risk and operational readiness far better than output-only scoring.
Q: Why does phase-based dataset curation matter for AI governance?
A: Because segmentation choices shape what the model learns as a meaningful unit of action. If the data is split at arbitrary token boundaries, the model can lose task intent, while phase-based curation preserves the reasoning structure that governs behaviour. That makes curation a governance control, not a neutral preprocessing step.
Q: When can training data improve performance beyond the original use case?
A: When the dataset captures human judgement, sequencing, and tool interaction rather than just end-state examples. In that case the model can learn transferable skills such as spatial reasoning, navigation, and decision timing. Teams should assume that strong workflow data may create broader capability than the original domain suggests.
Q: What should AI teams do when workflow traces broaden model capability?
A: They should narrow deployment scope, extend evaluation to adjacent tasks, and define where delegated action must stop. A model that learns from human workflows can become useful in settings that were never explicitly approved, so governance has to follow the transfer surface, not just the training label.
Technical breakdown
Why workflow trajectories matter more than finished artifacts
A trajectory captures the sequence of actions, corrections, and choices that lead to an output, while a finished artifact only shows the endpoint. For agentic systems, the difference is important because policy-relevant behaviour lives in decision order, not just final correctness. Training on trajectories can teach navigation, grounding, and task continuation in ways that static examples cannot. That also means the dataset design itself becomes part of the model’s behavioural envelope, because it determines whether the model learns isolated tasks or transferable action patterns.
Practical implication: Practitioners should evaluate training data at the workflow level, not just the output level, when assessing model readiness.
Phase-based curation versus long-context sharding
Phase-based curation splits a long task into meaningful stages such as ideation, layout, correction, and finalisation. Maximum context-length sharding cuts data to fit a token window, but the split point may ignore task intent and break causal continuity. In this article, phase-based curation performs better because it preserves the semantic structure the model needs to learn. The technical lesson is that data segmentation is not a storage problem only; it is a supervision problem that shapes what the model perceives as a unit of action.
Practical implication: Use segmentation methods that preserve task intent when preparing long-horizon training data for agentic systems.
Why design data improves broader agentic navigation
The reported gains on non-design benchmarks suggest that the model is learning general action skills, not simply memorising Figma-specific operations. Those skills include spatial reasoning, tool use, and deciding when a coordinate or action is good enough to emit. That is why the article’s results matter beyond design workflows. When a dataset captures expert judgement, it can improve how a model navigates other interfaces and tasks, which makes curation quality a direct control point in agentic model development.
Practical implication: Treat workflow datasets as capability-shaping assets and validate transfer risk before reusing them across domains.
Breaches seen in the wild
- tj-actions/changed-files compromise 2025: A stolen bot token let attackers poison tj-actions/changed-files so pipelines printed their CI/CD secrets to public logs (CVE-2025-30066).
Read and download The State of NHI & AI Agent Breach Report 2026, covering 200+ breaches impacting Non-Human Identities including AI Agents.
NHI Mgmt Group analysis
Workflow fidelity is now a governance issue for agentic model training. The article shows that how expert behaviour is captured changes what the model learns, not just how much it learns. That matters because training data built from finished outputs can conceal the reasoning path that makes agentic behaviour reliable or unsafe. Practitioners should treat workflow representation as part of model governance, not as a preprocessing detail.
Intent-segmented data creates a more transferable capability profile than flat long-context slicing. The finding that phase-based curation outperforms maximum context sharding suggests that semantic boundaries are part of the supervision signal. This is important for AI risk teams because a model trained on structurally coherent workflows may generalise more broadly than intended. Practitioners should review whether their dataset construction is expanding behaviour into adjacent tasks.
Capability transfer debt: the same dataset choices that improve task performance can also broaden the model’s usable envelope faster than policy and evaluation teams expect. The article’s out-of-domain gains show that a narrow design dataset can still produce general agentic competence. That creates a governance gap between training intent and operational deployment. Practitioners should align evaluation scope with the real transfer surface, not the nominal domain.
Human workflow traces are becoming a control surface for AI assurance. The article’s manual inspection results show that model gains come from element selection, coordinate understanding, and decisiveness. Those are not just performance qualities; they are observable operational behaviours that security, product, and AI governance teams need to define, test, and constrain. Practitioners should build dataset review and behavioural testing into the AI control plane.
The identity angle is indirect but real when agentic systems act through software interfaces. The article is not about human identity or NHI governance directly, yet it shows how model behaviour can be shaped into actions on behalf of a user across tools and workflows. That makes interface delegation, session context, and action boundaries relevant to governance discussions. Practitioners should map where agentic systems inherit user intent and where that should be bounded.
What this signals
Training data design is becoming a model-risk control point. The practical question is no longer whether a dataset is large enough, but whether its structure teaches the model the right unit of action. For agentic systems, the difference between phase-aligned supervision and arbitrary slicing can change both capability and boundary control.
Agentic AI governance should move upstream into dataset curation. The closer a training set is to real human workflow, the more likely it is to shape how the model delegates, continues, and completes work across tools. That means approval processes need to cover the provenance and segmentation of workflow traces, not only the model artifact.
Delegation boundary drift: when a model learns from expert workflow traces, it may internalise behaviours that look narrowly task-specific but operate more broadly in practice. Teams should expect stronger transfer from better-curated data and should test for unplanned reach before putting the model into production.
For practitioners
- Define workflow-level evaluation criteria Test agentic models against task sequences, not just final artefacts, so you can measure whether the model preserves intent across steps and corrections.
- Adopt phase-based dataset curation Segment long training recordings by meaningful task phases before fine-tuning, and reject arbitrary sharding that breaks causal continuity.
- Review transfer risk before reuse Assess whether a workflow dataset built for one interface could expand capability into adjacent tools or tasks that were not part of the original approval scope.
- Add behavioural controls to AI governance Track whether the model can select elements, resolve coordinates, and produce decisive outputs in ways that align with approved operating boundaries.
Key takeaways
- Intent-segmented workflow data can teach models behaviours that generalise beyond the domain where the traces were captured.
- How the data is cut into training units can matter as much as the raw volume of examples.
- For AI governance teams, dataset curation is part of behavioural control and should be reviewed with the same discipline as model evaluation.
Related NHI Mgmt Group resources: AI Governance Guide · Top 10 NHI Issues · Ultimate Guide to NHIs: Key Challenges and Risks · Human vs Non-Human Identity
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
OWASP Agentic AI Top 10 addresses the attack surface, NIST AI RMF and NIST AI 600-1 set the technical controls, and ISO/IEC 42001:2023 defines the regulatory obligations.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST AI RMF | GOVERN — AI Governance and Accountability | The article is about governance of training data and resulting model behaviour. |
| Recommendation — Govern workflow dataset curation, evaluation scope, and transfer risk as part of AI accountability. | ||
| ISO/IEC 42001:2023 | Clause 8 — Operation | The article concerns controlled operation of AI training and evaluation processes. |
| Recommendation — Operationalise dataset provenance, segmentation, and evaluation controls in the AI management system. | ||
| NIST AI 600-1 | Data and Model Supply Chain — Data and Model Supply Chain | Workflow traces are the supply input shaping model behaviour and transfer. |
| Recommendation — Assess training data provenance and segmentation before using it to expand agentic capability. | ||
| OWASP Agentic AI Top 10 | ASI03 — Identity & Privilege Abuse | The article touches delegated action through software interfaces and boundary control. |
| Recommendation — Bound delegated actions and review where workflow-trained agents can exceed intended privileges. | ||
Key terms
- Workflow Trajectory: A workflow trajectory is the ordered record of actions, corrections, and decisions that produce an outcome. In AI training, it matters because sequence reveals intent, not just end-state quality, and that sequence shapes how an agent learns to act across steps and tools.
- Phase-Based Curation: Phase-based curation is the practice of splitting long task data into semantically meaningful stages such as setup, execution, correction, and completion. It preserves task intent better than arbitrary slicing and gives models a cleaner supervisory signal for long-horizon behaviour.
- Capability transfer: The deliberate movement of knowledge from vendor to customer during onboarding and ongoing operations. It is stronger than ticket resolution because it leaves the customer able to sustain integrations, troubleshoot failures, and evolve the platform independently.
- Delegation Boundary: A delegation boundary is the line that separates what a person, service account, or agent may do directly from what it may do on behalf of someone else. It matters because runtime access should follow the delegated relationship, not expand into broad inherited privilege.
Deepen your knowledge
NHI Foundation Level course, the industry's only accredited NHI security programme, covers NHI governance, machine identity security, and secrets management. It helps security and identity practitioners connect control design to the broader trust boundaries their programmes depend on.
Published by the NHIMG editorial team on October 22, 2026.
NHI Mgmt Group, the independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org