The Age of Decommission

Protect the expertise you will need next.

The spreadsheet was the first shadow agent, and the office already taught us why

Office automation removed narrow clerical tasks but made informal systems of record flourish around the official ones. The current shadow-AI surge is the same impulse at a more intimate scale: work moving to the place where it can actually get done.

What it feels like

The private relief of the spreadsheet that works, followed by the fear of what happens when only one person understands it.

You are not the problem because the workaround worked. You are seeing the official process through the gap it left.

A spreadsheet that works is a private sort of relief.

The official report is late. The system can’t show the mismatch the way your work needs it shown.

Then the cells line up. Invoices on one side, payments on the other, one red number that explains your whole afternoon.

You haven’t defeated the organization.

You’ve made tomorrow possible.

And then somebody asks where the real number came from.

It isn’t panic, exactly. It’s the small tightening behind your ribs when you realize the file has become more trusted than the system it corrects.

The formulas are yours. The exceptions are yours. The notes in the yellow cells are yours. If the file stops making sense, the work may stop making sense with it.

You didn’t build it because you love disorder. You built it because the sanctioned path had stopped meeting the work.

There were people waiting, payments to reconcile, a manager wanting an answer, dinner to make, messages arriving faster than the queue could absorb them.

A spreadsheet that makes the answer visible isn’t a moral failure. It’s the ordinary competence of somebody trying to get through a day.

You can leave the robot uprising out of this.

Something smaller and older happened to you.

The spreadsheet was the first shadow agent. It watched a local pile of facts, applied a private logic, remembered the exception, and produced the answer everyone started trusting.

The new one has a chat window, a personal account and a connector.

The old lesson is still sitting underneath it.

1986 — You keep the real numbers in a paper notebook.

1999 — The spreadsheet becomes the report everyone trusts.

2014 — A macro sends the reminders.

2026 — The AI runs your reconciliation from a personal account.

The file that knew more

Your spreadsheet was never only arithmetic.

It bound inputs, formulas, assumptions and outputs into a model that the person nearest the problem could change.

A purchaser watched the budget move when a quantity changed. An administrator matched payments. A manager saw actual spend beside plan without waiting for a report to travel through three teams.

That local speed is why spreadsheets live so stubbornly between an enterprise system and your working notes.

And the office recorded how ordinary this became. In US executive-assistant job postings in 2025, 38% mentioned Excel and 45% mentioned Microsoft Office.

That’s not an exotic technical subculture.

That’s the furniture.

Office tools genuinely did reduce the old clerical production line.

Typing, copying, rekeying, filing, routine calculation, status chasing.

Word processors and typists are projected to fall by more than a third between 2024 and 2034.

Data-entry keyers by about a quarter.

The work didn’t vanish. It dispersed. Into forms, templates, imports, scans, systems, and the hands of everyone who could now type straight into the record.

What remained is the part the file can’t settle.

The duplicate customer. The unmatched payment. The odd variance. The stale code.

The person whose case doesn’t fit.

Bookkeeping and accounting clerks are projected to decline by around 6% over the same decade, and the same record describes a shift toward analytical and advisory work.

Automation moved the human closer to reconciliation and explanation. It didn’t make correct records maintain themselves.

Which is why your good spreadsheet feels so intimate.

It isn’t merely calculating. It’s holding a local theory of what the official records mean when they disagree.

You know which tab is current. Which formula survives an unusual month. Which figure to ignore until Friday. Who will recognize an impossible total.

That knowledge is useful. It’s also a form of authority, whether or not anybody granted it.

The quiet promotion

A personal scratch calculation can be loose.

Your workbook becomes something else the moment its output governs a payroll adjustment, a regulatory report, a board forecast, a recurring reconciliation.

Then it’s an undeclared system of record. Not necessarily the approved source of every field. Just the place a consequential answer is actually taken from.

The difference isn’t whether your file is tidy. It’s whether people rely on it when a decision has to be made.

Office automation made that promotion easy, because it put production power right next to the work.

The old fantasy said a machine would replace administration. The actual office handed administrators better ways to assemble the fragments administration still had to hold together.

Sometimes your authority showed up as a macro.

The spreadsheet noticed an overdue row, wrote the reminder, copied the address, pushed the case along.

The step felt small because it came after the calculation. But it had crossed a line.

A model that once helped you see a problem was now starting work in another system. Your formula had become a process. The process had become a local agent.

The current version looks more innocent because the interface talks back.

A personal AI account reads a list, summarizes the differences, drafts the explanation, sends the reminder, maybe reaches into a connected system.

It offers you the same relief as the workbook, only closer to the moment of exhaustion. You don’t have to understand every formula or anticipate every exception.

That’s the attraction. It’s also why the old question comes back.

When does a helpful local tool become the place a business decision is really made?

What the workaround reveals

You’re not the problem because the workaround worked. You’re seeing the official process through the gap it left.

That correction isn’t a defence of careless handling.

A shadow flow can clear a backlog central IT ignored, move data without authorization, and make a material decision the process owner has never heard about.

Each claim can be true.

Your spreadsheet’s usefulness is evidence about the sanctioned path. Its data and its authority are evidence about the risk.

Flatten either one into the other and nobody learns anything.

The failures that expose a process like yours are almost domestic.

The creator leaves. A connector hits its limit. Someone renames a shared spreadsheet. A sensitive record turns up in an unexpected mailbox.

What looked like one person’s convenience is suddenly part of payroll, customer service, or supplier payment.

Delete it on discovery and you interrupt work people depend on. Leave it untouched and you preserve an unknown credential, data class, decision rule and trail of copies.

The emergency is real precisely because your local fix had become operationally important.

This is where a workflow stops resembling an app and starts resembling a record of authority.

A reconciliation sheet that reads a report is one thing. One that sends payment reminders is another. An AI that changes a supplier record is a third.

The screen looks equally modest in all three. The effects don’t.

And the administrative work office automation left behind comes back as control work.

Who owns the process? Which system is authoritative for the field? What happens when the source is blank or stale? Who approves an exception? Where’s the published version?

A mapping specification needs five attributes per moved field. Source, target, transform, owner, and what happens to blank or invalid input.

That sounds like the language of people who’ve made a simple thing unbearable. Often it’s the language of someone who cleaned up after a simple thing reached the wrong system.

The agent inherits the job

The current pitch treats the AI as if it arrived from nowhere, clever and abstract.

But your agent inherits the workbook’s most important feature. It carries a local interpretation across a boundary.

It reads sources, decides what matters, produces an output, and may trigger something downstream.

That’s not a prediction about every chat prompt. It’s a description of what happens when personal assistance becomes a recurring route through real work.

The office precedent says two things at once, and you need both.

First: the narrow clerical task may genuinely shrink. General office clerks are projected to fall by nearly 7% between 2024 and 2034.

Second: removing the narrow task creates new work around the record. Secretaries and administrative assistants barely move over the same period.

You may no longer type the letter. You still have to decide whose meeting matters, what the record means, and who needs to know.

So an AI reconciliation from a personal account isn’t proof the office has stopped needing people.

It’s a clue that the official route failed to carry some piece of judgment, speed or context. It can also be the start of a system nobody agreed to govern.

The improvement and the warning arrive in the same moment.

Ask the typists. The data keyers. The people who inherited the exceptions.

The spreadsheet was the first shadow agent because it didn’t wait for permission to become useful.

It became useful exactly where the official process had gone too slow, too distant, too rigid, or simply too blind to the work in front of you.

The macro made the next move. The AI makes several at once. The difference is scale and intimacy. Not impulse.

The correction is gentler than the indictment. You’re not reckless because the workaround brought relief.

You’re looking at the official process through the shape of what it failed to deliver.

But the relief carries a request the old office ignored until somebody left. Name the work. Name the owner. Name the record. Admit where the authority went.

Until then, the file that saved your afternoon is quietly deciding what the organization knows.

Put this to work

  1. Office tools reduced dedicated typing, keying, copying, filing, routine calculation, and status chasing, while reconciliation, exception judgment, coordination, and records stewardship persisted.
  2. A local spreadsheet becomes an undeclared system of record when people rely on its inputs, formulas, assumptions, or published output to make consequential decisions.
  3. A production workflow needs a named owner, purpose, users, systems, credential, data class, run volume, and decision authority before its risks can be understood.
  4. Creator departure, connector limits, renamed shared files, and sensitive records appearing in unexpected mailboxes expose shadow processes after they have become operationally important.
  5. A shadow process can reveal a failed sanctioned path while still creating real data, access, and decision-authority risks.
  6. Workflow control requires authoritative records, separate identity and authorization checks, explicit exception routes, and evidence that an external action actually completed.

Questions

What work did office automation actually remove?
Office automation reduces dedicated work whose main output is retyping, reproducing, formatting, copying, filing, routine calculation, repeated data entry, and status chasing. It does not remove the need to judge an exception, reconcile records, maintain permissions, coordinate conflicting priorities, or communicate an accountable decision. The work shifts from producing the record to establishing whether the record is correct and what happens when it is not.
Why is a spreadsheet sometimes a system of record?
A spreadsheet becomes an undeclared system of record when people rely on its inputs, formulas, assumptions, or published output to make a payroll adjustment, regulatory report, board forecast, reconciliation, or other consequential decision. The file may be locally owned, but its result becomes operationally authoritative. In that condition, controlled inputs, formula review, access limits, a named approver, and a reliable published version matter.
What is the difference between a useful spreadsheet and shadow automation?
A useful spreadsheet supports personal analysis or a bounded calculation without becoming the authoritative route for a recurring decision. Shadow automation begins when a local file, macro, connector, or AI service moves information or triggers action across systems outside the approved process. The difference is operational authority: recurring use by others, consequential outputs, credentials, sensitive data, or a decision that the official owner does not know exists.
Why do people create shadow workflows when there is already an official system?
People create shadow workflows when the approved route does not deliver the work in time or does not accommodate the actual case. A spreadsheet may reconcile a backlog, a macro may send reminders, or an AI service may assemble a response when the sanctioned process is slow or incomplete. That evidence does not make unauthorized data handling safe; it identifies the delivery time of the sanctioned alternative as a cause of recurrence.
What facts make a hidden workflow understandable?
A first-pass inventory needs eight facts: owner, purpose, users, systems, credential, data class, run volume, and decision authority. Together they show whether the flow merely prepares information or reads, writes, approves, sends, or changes a consequential record. Dependencies and the last successful execution add useful context, but the eight facts establish the basic boundary of responsibility and exposure.
How do organizations usually discover a shadow process?
Organizations commonly discover a shadow process when its creator leaves, a connector reaches a limit, a shared spreadsheet is renamed, or a sensitive record appears in an unexpected mailbox. These events reveal that an informal tool has become part of a production path. Deleting it immediately can interrupt payroll, customer service, or supplier payment; leaving it unchanged can preserve unknown data, credential, and decision risks.
Can a successful local workaround still be unsafe?
Yes. A local workaround can solve a genuine backlog and still move data without authorization, use credentials too broadly, or make a material decision without the process owner knowing. These claims can all be true at once. The operational question is not whether the workaround deserves blame or praise; it is whether the work, authority, data, and evidence can be made visible without losing the service it supplied.
Why is a successful workflow run not proof that the business action happened?
A workflow run records that an automation attempted or completed its own steps. The business action is proved by the authoritative downstream record, such as a committed transaction, resulting record version, confirmation number, or timestamp. A timeout can occur after a downstream system commits, and an acknowledgement can be lost. Reconciliation therefore separates a workflow status from the actual state of the payment, record, message, or access change.
Why does a workflow need both a person and a service identity?
A workflow needs to preserve the initiating person's identity and purpose while using a separate service identity to make a system call. Authentication establishes who makes a request; authorization determines whether that identity may take a specified action on a specified resource for a specified purpose at that time. A service credential must not erase the person, policy, delegation, or approval that authorizes the underlying action.
What is the difference between a data failure and an access failure?
A data failure uses a wrong or stale authoritative fact, such as an inactive supplier appearing approved or a cost centre mapping to a former owner. An access failure exposes data or changes a record beyond the permitted scope. The repair differs: data stewardship corrects the source and reconciles copies, while security contains credentials, scopes, and affected access. Both can produce a legitimate-looking but wrong transaction.
Why is a dashboard showing 99.9% successful runs not enough?
A dashboard showing 99.9% successful runs measures availability or execution success, not whether a business rule operated correctly. It does not establish that the assigned approver was eligible, that a rejected case stayed rejected, that the right customer record was reached, or that a production change received review. Workflow evidence needs the relevant source versions, rule version, approvals, results, retries, exceptions, and human overrides.
What does a safe response to shadow automation recognize?
A safe response recognizes two realities: the informal flow may be carrying work that the official process failed to deliver, and the same flow may have unknown data, access, or decision authority. The organization can classify it as retire, contain, migrate, or formally accept for a short controlled period. A migration preserves business outcomes and test cases rather than merely rebuilding the visible screen in an approved tool.