The Future of Research
Composing an Agentic Research System
Seven distinctions to notice in your own AI practice, and five questions that locate any agentic arrangement, whatever the method.
A stack becomes a research system only when its parts have jobs, boundaries and a shared record.
Start from practice, not the stack
Names such as model, agent, skill, MCP server, CLI and plugin describe surfaces. They do not yet describe a research arrangement. A list of what is installed leaves the consequential choices invisible: who owns the question, what evidence the AI can reach, what survives a handoff, and who may approve the next action.
This page works the other way round. It begins with seven distinctions you can notice in your own practice without any technical vocabulary, whether the work is fieldwork, experiments, datasets, archives, theory, models or writing. It then gives the five questions that locate any arrangement, and only after that names the surfaces. None of the distinctions is a level to reach. Different tasks in one project can sit on different sides of each, and a conversation is often the right arrangement.
Seven distinctions
Answering or acting
A proposed operation is different from one the system performs. An assistant that writes an R script and hands it back is answering; you run it, read the error, paste it back. A tool-using agent runs the script itself, reads the error, and tries again, while you set the boundary and judge the analysis. The second arrangement removes the copy-and-paste loop. It does not make the statistical claim any better supported, and passing code tests establishes nothing about the estimate.
The qualitative version is the same shape. An assistant that suggests codes for a transcript is answering. An agent that opens every transcript in a folder, applies the codebook and writes a memo per file is acting. Interest in the second arrangement is not evidence of using it, and a coherent set of memos is not evidence of fidelity to the material.
Who chooses the next step
When the route is unclear, one of three things happens. You design the workflow and the AI executes it. The AI proposes a workflow and you revise it before it runs. Or you state the goal and the boundaries and delegate the construction of the workflow itself. These are control modes, not maturity stages. The further construction is delegated, the more you must be able to read the plan, the evidence rules and the decision rights back from artifacts rather than from memory.
Chat or project
Ask what would survive if the conversation vanished now. In a chat, the answer is usually nothing: the reasoning, the intermediate results and the decisions live in a scrollback that will not be opened again. In a project, the AI works inside a folder whose files, records and decisions outlast any single session, and can be read by a collaborator or by a different AI. A literature scan that logs its queries and raw returns to files is a project; one that summarises "the main papers" in a reply is a chat, however good the summary.
Improvised or reusable
If you find yourself explaining the same procedure every time, that procedure can be written down once. A written procedure an agent can load is a skill: how to search, what to check, when to stop. A skill is not the thing it describes. It can tell an agent how to run a scan; it cannot retrieve a record. Retrieval needs a tool, reached through a connector (an MCP server), a command-line utility or an API. The two fail differently. A weak skill needs better procedure; a missing field needs a different tool.
Several opinions or different jobs
Running the same prompt through three models produces three opinions. It does not produce independent evidence, because the three share the framing, the input and the omissions. A differentiated team gives each agent a different job, a different slice of the evidence, or a different responsibility: one searches declared terms, one tests adjacent vocabulary, one reads only the raw records and challenges the frame. Agreement among differentiated agents means something. Agreement among copies means less than it looks.
For interpretive work the distinction is sharper still. A design that rewards convergence will make ambiguous accounts look coherent. A design that assigns someone to keep the tension alive protects what the material actually said.
On demand or recurring
Some work starts when you ask. Some starts on a schedule, or when a folder changes, or when a monitored source updates. Scheduling, initiative and authority are separate things: a recurring job can still require your approval before it acts on anything, and a one-off job can be given wide latitude. Ask what starts the next round and who authorised it.
Carried in your head or in shared records
How does a collaborator, or a second AI application, know what changed and why? If the answer is "I tell them", the context is human-carried, and it will not survive a holiday or a handover. If the answer is "it is in the project record", the decisions, tensions and changes of mind are somewhere readable. Durable records of reasoning are different from durable records of sources: a reference library preserves what was found; a research memo preserves why the question moved.
Five arrangements
The distinctions above combine into a short vocabulary of arrangements. It is a map, not a ladder.
- Conversation: you ask, it answers, and you carry everything between turns.
- Tool-using assistant: it can run code, read files or search, and checks with you as it goes.
- Continuing project agent: it works inside a project whose files, decisions and records outlast the chat.
- Differentiated team: several agents with different jobs on different evidence.
- Shared project across hosts: more than one AI application working from the same records.
Repeatability, initiative, continuity and oversight vary inside each of these. A differentiated team can require approval at every consequential step; a single agent can run a scheduled task unattended. None of the five changes who owns the research question.
Five functional questions
Whatever the arrangement, five questions locate it. They travel across products, and they reveal when an arrangement is more elaborate than the task requires.
| Functional question | Plain-language test | Example |
|---|---|---|
| Instruction | What is the job, and how should it be done? | A research brief and a reusable search procedure |
| Actor and environment | Who reasons or acts, and where? | A lead agent and bounded specialist roles inside an agent host |
| Capability and operation | What can the arrangement reach or do? | A scholarly API query, a reference-library operation, a local command |
| State | What evidence, outputs and decisions survive? | Source records, project files, memos of reasoning |
| Gate | Who or what can approve, redirect, stop or continue? | A researcher approving the evidence frame, or refusing a proposed change |
Each failure has a different remedy. A weak instruction needs better procedure. A missing capability needs a different tool. A lost decision needs durable state. An unauthorised action needs a stronger gate.
What each surface contributes
Only now do the technical names earn their place. The table classifies surfaces and functions, not brands; one project can expose several rows at once.
| Surface | Contribution | Boundary to remember |
|---|---|---|
| Model | Supplies a reasoning engine | A model is not a role, a workflow or a source of evidence |
| Agent | Owns a bounded task or responsibility | A second agent helps only when its assignment or evidence differs |
| Agent host | Provides the workspace in which an agent reads, writes, calls tools and coordinates | The host does not decide the research method |
| Skill | Supplies reusable procedural instructions | A skill can say how to search; it does not retrieve a record |
| MCP server | Exposes callable tools or data through a standard interface | Access is a capability, not a warrant for using it |
| CLI utility or API | Performs an operation or supplies a service | A deterministic operation should stay distinguishable from interpretation |
| Plugin | Packages skills, commands, agents, hooks or runtimes for a host | One plugin can expose several surfaces |
| Platform | Runs a research activity outside the agent host | Participant-facing action has a different consequence profile from private analysis |
| Shared state | Carries evidence, outputs, decisions and continuity | A temporary chat is not durable research state |
| Gate | Authorises, checks, redirects or stops the next action | A gate must name a decision owner and a criterion |
Memex, for example, is packaged as a plugin and a CLI, while its durable records serve as state. A reference manager such as Zotero is a platform, a source library and, through its MCP server, a set of callable operations. A useful system rarely needs every row.
The smallest useful system
Before adding a component, ask what observed problem it solves.
- Use one careful reader when the material is small and interpretive continuity matters more than parallelism.
- Use a deterministic script when the operation has a stable rule and no interpretive discretion.
- Add an agent when a bounded role benefits from contextual reasoning and leaves an inspectable artifact.
- Add another agent when it receives a meaningfully different brief, evidence slice or responsibility.
- Add durable memory when a decision or a tension must survive the session.
- Add an enforced gate when a recurring failure cannot safely depend on recollection.
Complexity is earned by a better evidence trail, a protected tension or a safer decision. It is not earned by the number of boxes in the architecture. Direct human work, one model, a script or a spreadsheet remain valid designs.
The consequence gradient
Controls should strengthen as the system moves outward from your own notes.
| Movement | New consequence | Stronger control |
|---|---|---|
| Private note | A poor interpretation misleads the researcher | Traceable evidence and a revision path |
| Source selection | The system changes what enters the corpus | Declared criteria, query logs and human adjudication |
| Data collection | The system shapes what becomes evidence | Protocol review, provenance and data governance |
| Participant interaction | The system acts on another person | Consent, disclosure, safeguarding and escalation |
| Public claim or action | The system affects readers or institutions | Author review, claim-level support and publication authority |
The gradient is why the same architecture needs different gates in different research. A system that helps produce the account it will later analyse, as OpenInterviewer does, sits further along it than one that reads existing material.
Where to go next
The working stack behind these distinctions: roles, memory, verification and a shared project across hosts.
Core PrinciplesThe research judgement the arrangement is built to protect.
The Failure MuseumWhat goes wrong at each surface, and what the gate should have been.
ToolkitThe plugins, skills, MCP servers and platforms that instantiate the rows above.
cite this page
Lin, X. (2026). Composing an Agentic Research System. Research Memex. https://research-memex.org/docs/advanced-topics/composing-agentic-research-systems
@misc{docs-advanced-topics-composing-agentic-research-systems-2026,
author = {Xule Lin},
title = {Composing an Agentic Research System},
year = {2026},
howpublished = {\url{https://research-memex.org/docs/advanced-topics/composing-agentic-research-systems}},
note = {ORCID: 0000-0001-7885-4194}
}one renderingthe source remains