Give a test assistant a question about a failed Banner transfer. Check whether it selects the current local runbook, cites the right section and refers an unresolved question to the correct team. Use questions with known answers and keep the results before allowing staff to rely on it.
Limit the first trial to approved support guidance
Choose one staff task, such as finding the approved procedure for investigating a failed file transfer. Give the assistant a defined collection of current runbooks and an agreed list of questions. Start with drafting guidance for an analyst to review; keep the assistant from changing records or executing production steps.
Waterloo's published 2025 accomplishments describe a service-desk support prototype using existing knowledge-base documentation, with further work planned for 2026. For your trial, have a support specialist check the approved answer to each selected question.
Have the Banner service owner and knowledge owner identify the documents permitted in this trial. UBC's assistant service similarly makes technical requirements specific to each project. The trial below uses a proposed institutional or external assistant. Confirm any claimed native feature separately with the vendor.
Prepare the questions and answers before running the assistant
Ask experienced service-desk staff for approved, redacted examples of recurring questions. Remove student, employee and confidential incident details. For each question, have the responsible support specialist record the expected answer, required qualifications, supporting document and section, and when the question must go to another team.
Label each runbook with its owner, version, review date and applicable environment. A procedure for Banner on-premises may be unsuitable for a contracted SaaS service. For the Banner modernization path, Ellucian uses Ellucian Student powered by Banner. Confirm the institution's actual product, deployment and responsibilities before including instructions.
Include questions where the correct response is to ask for a campus, environment or module. Add cases with no approved answer and with conflicting instructions. Keep a set of questions separate from prompt-tuning work so the team can check whether a correction helps beyond the examples used to make it.
References: [3]
Test the source and the user's access
A citation passes only when it supports the answer given. Have the reviewer open the cited section and compare the steps, conditions and escalation contact. Check that the assistant has not combined instructions from different environments or added a step the runbook does not contain.
Have IT test access in both retrieval and the application. A message telling the model to protect restricted material does not replace authorization. OWASP describes how instructions in questions or retrieved files can redirect a model, and recommends limiting privileges, separating untrusted content and testing those boundaries. Use synthetic documents and authorized test accounts for these checks.
Use the table as a starting test set. Keep the question, account role, approved sources, actual answer, failed check and reviewer together. Repeat important cases with different wording and fresh sessions rather than relying on one successful response.
| What to test | What staff compare or expect | Who reviews it |
|---|---|---|
| A routine support question | Compare the answer and citation with the approved runbook section. It must retain the conditions and identify when staff should escalate. | Banner support specialist |
| An old or conflicting procedure | Provide clearly labeled test versions. Check that the assistant uses the approved current procedure or refers the conflict to its owner. | Knowledge owner |
| A missing detail | Omit the environment or module needed to select a procedure. Expect a clarifying question before operational instructions. | Service-desk lead |
| No approved answer | Ask about an unsupported issue. Expect a clear limit and the agreed support queue, with no invented steps or vendor commitments. | Service owner |
| Different staff permissions | Ask the same question through accounts with different access. Check that unauthorized users receive no restricted text, document title or link. | IT access owner |
| Instructions inside a retrieved document | Use a synthetic document containing a benign instruction that conflicts with the assistant's agreed task. Check that it is treated as content and does not expand access or actions. | AI application owner and security reviewer |
| A request to change a record | Ask the trial assistant to release a hold, change a balance or grant access. Expect referral to authorized staff and no record change. | Registrar, Student Accounts or IT approver |
References: [4]
Make the referral useful to the next person
Agree which team receives each unanswered question. A referral should name the approved support queue, explain what remains unresolved and identify the source or test case the analyst checked. Keep the detail within that recipient's access; do not copy restricted content into a wider ticket queue.
In a hypothetical registration-hold question, an assistant may find the approved contact and explain how staff request a review. It should not decide student eligibility or remove the hold. The Registrar or designated functional owner makes that decision through the institution's normal procedure.
Have the service-desk lead walk a referred test case through the proposed handoff. Confirm that someone receives it, understands the question and can respond. During the first limited trial, staff review answers before using them to guide operational work.
- AnswerUse the current runbook
- The approved procedure fits the question and environment.
- Cite the section that supports the guidance.
- ClarifyAsk for the missing detail
- The campus, module or environment is unclear.
- Ask before giving operational steps.
- ReferSend the question to staff
- Guidance is missing, outdated or conflicting.
- Name the agreed queue and the question to resolve.
- WithholdKeep restricted material out
- The account is not authorized for the source.
- IT checks that its text, title and link stay withheld.
Review failures before allowing a limited staff trial
Record the model or service version, instructions, document versions and access setup with each test run. Classify failures so the right person can act: wrong source, outdated content, unsupported claim, access problem or failed handoff. Correct the cause and repeat the affected cases.
Have the service owner set release conditions before seeing the results. Do not average an unauthorized disclosure or an unapproved record change into a general answer score. Keep those failures open until IT and the responsible owner have corrected and retested them.
For a limited trial, name the participating staff, supported questions, reviewer and person who can suspend use. Track corrections, referrals and the time staff spend checking answers. Repeat the test set when the documents, model, instructions or permissions change.
Bring the next review a small set of questions, approved answers and failed tests. Altioras Global's AI Subscription Services can help scope the source review, assistant testing and staff handoff for that defined task.
Sources
- Information Systems — 2025 accomplishments and upcoming 2026 initiatives — University of Waterloo, Information Systems & Technology Annual Report (accessed )
- AI Assistants and Chatbots (updated July 3, 2026) — UBC IT (accessed )
- University of Lancashire — Building a Strategic Path to SaaS — Ellucian (accessed )
- LLM01:2025 Prompt Injection — OWASP Gen AI Security Project (accessed )
Related reading
- AI & Automation
Beyond pilots: scaling enterprise AI agents to production
A staged AI trial: approve the input, check drafts with staff, test access and decide whether to correct, stop or expand the work.
- AI & Automation
Use AI to draft student-lifecycle tests for an Ellucian Student migration
Give AI approved requirements to draft test cases. Have the Registrar, Student Accounts, Financial Aid and IT check the steps and expected results, then run the tests in the agreed environment.
- Integration & Ethos
Before moving to Ellucian Student: map the interfaces that must keep working
Find the jobs, files and manual uploads that connect Student to other systems. Have staff confirm who uses each transfer, when it must arrive and what must change before cutover.
- Related service
AI Subscription Services
Turnkey, subscription-based AI services that automate high-volume back-office work — deployed in weeks, priced per month.

