Back to News
June 1, 2026Blog

The Missing Role in Your Enterprise AI Strategy: The Citizen Developer

Deon MetelskiTao Xia
By Deon Metelski and Tao Xia

A real bottleneck in healthcare AI is the role gap. While process experts like nurse managers and revenue-cycle leads know exactly which tasks should be "agentified," they often lack the technical skills to build them, leaving critical projects stuck in IT backlogs. A Citizen Developer (also known as an Agent Supervisor) is a domain expert who can design, build, and test AI agents without needing a software engineering background. By using actAVA’s KORA platform, these experts can move from an idea to a tested pilot in just a few days.

The Missing Role in Your Enterprise AI Strategy: The Citizen Developer
Every healthcare leader I talk to has the same bottleneck. Their process experts (i.e., the nurse manager who runs the discharge workflow, the prior-auth specialist who knows every payer's quirks, the revenue-cycle lead who can recite denial codes from memory) know exactly which work should be agentified. They just can't build the agents themselves. So the request goes into IT's backlog, sits behind seventeen other priorities, and a quarter later, the agent that ships looks nothing like what the operator asked for.

That bottleneck isn't a tooling problem. It's a role problem. Your AI organization is missing a position on the depth chart.

We call that position the Citizen Developer — and it's a first-class role inside actAVA's KORA platform. The term "Agent Supervisor" is also gaining traction for the same concept.

The Hospital Analogy

Think about how a teaching hospital staffs a busy service line. You don't have one role — you have a gradient of roles, each with explicit privileges and explicit guardrails.

Residents
See patients, write notes, and draft orders. They learn by doing real work — but their orders don't go into effect until co-signed by an attending.
Attendings
Review the resident's plan, sign the orders, and take ownership of the clinical outcome. The responsible layer between draft and action.
Department Chiefs
Set policy across the entire service line: which protocols are approved, who can practice independently, and what crosses into peer review territory.
Why It Works
The people closest to the patient get to practice the craft, while the people accountable for outcomes still control what goes live. That's exactly the structure we built into KORA.

What's a Citizen Developer, Exactly?

A citizen developer is a domain expert who can design, build, and test AI agents — without needing a software engineering background or going through an IT broker for every change. They are the resident on the service line.

In actAVA, the citizen developer holds a specific organizational role called dev. It sits between the everyday user (who runs agents that already exist) and the admin (who deploys agents to production and governs the org's AI footprint). Three roles, one ladder, clear handoffs.

Role Matrix — Permissions by Level


Role Can Do Cannot Do
User Run live agents. Chat. View results. Build, modify, or deploy.
Dev Citizen Developer Build agents. Test against benchmarks. Compose multi-agent workflows. Assign to users for piloting. Promote to production. Change org-wide settings.
Admin Everything above, plus: review citizen-developer work, approve and promote agents to live, configure HITL approvers, manage dev privileges.

The dev vs user distinction is enforced at the platform layer, not just hidden in the UI. It's a gate, not a suggestion.

Why This Role Was Missing — and Why It Matters Now

McKinsey estimates 70–80% of enterprise work can be agentified. MIT reports that 95% of AI pilots fail. Both numbers are true at the same time, and the reconciliation is uncomfortable: most of the opportunity is in workflows that the people building agents have never personally run.

When the only people allowed near agent creation are central IT or a vendor's professional services team, you end up with a small number of high-cost, slow-to-ship agents that solve generic problems generically. Meanwhile, the prior-auth specialist who could spec a ten-step denial-recovery agent in an afternoon has no path to build it.

"Wait — my team can do this? Can we own our own roadmap?"
— Chief People Officer, West Coast hospital system

A C-suite leader at an international hospital system said the same in different words: he wanted his teams to "own as much of the agent development lifecycle as possible" — but with one ask before flipping the switch: make sure everyone builds the same way, in any problem area. He wanted velocity without chaos. That's what the role boundary buys you.

How It Works in actAVA

The citizen developer lifecycle is a literal, enforceable workflow , not a slide in a deck. Here's the path an agent takes from idea to production in actAVA KORA.

  1. Build. A citizen developer opens Agent Studio and can start from a blank agent or fork one from the Agent Library — a catalog of pre-built workflows for HR, RCM, prior auth, value-based care, and more. They configure identity, mission, guidelines, knowledge scopes, and tools, then connect to EHR, CRM, scheduling, or claims via the MCP Store. Every change creates a new draft version. Drafts are private to the dev — nothing they do here can affect a single live conversation, call, or workflow elsewhere in the organization.
  2. Test. Before the agent goes anywhere near a real user, it goes through evaluation. Citizen developers can run the agent against a benchmark dataset, A/B test prompts and model choices side-by-side, replay de-identified traces, and inspect each tool call. This is where the role boundary earns its keep. Citizen developers are expected to break their own agents. The platform makes it cheap. What they cannot do is push a half-tested agent on patients.
  3. Assign for Internal Pilot. Once satisfied, the dev can assign the agent to specific users or groups for internal use — with a limited blast radius, full observability, and still gated from broad production traffic. The resident running cases under direct supervision.
  4. Approve & Promote. To take an agent LIVE, an admin must explicitly promote the version. This is a deliberate, named action. The promoted version is locked. Subsequent edits create a new draft, which must go through the same gate. No silent regressions. For workflows needing richer review (i.e., clinical sign-off on an outbound message script, compliance review on a coverage-determination agent), admins can route approval through a configured HITL Approver group. The agent execution pauses until the approver acts.
  5. Watch the Tape. After deployment, every run is observable. Citizen developers can see how their agent is performing in production, where it's failing, what it's costing, and what users are saying. They draft the next version. The cycle repeats — and the people pushing the flywheel are the people who actually own the workflow.

A Concrete Example

A revenue-cycle director at a multi-specialty group has been losing sleep over a specific denial pattern from one large payer. She knows the four-step appeal that works because she's done it 200 times. Today, getting that codified into an agent means six weeks of back-and-forth with IT, two discovery sessions, and a v1 that gets two of the four steps wrong. Here's the same week with a citizen developer license:

The Same Week — With a Citizen Developer License


Day What She Does
Monday Opens Agent Studio, forks the Denial Recovery agent from the library, and adapts the appeal logic to match her payer's quirks.
Tuesday Runs it against last quarter's actual denial dataset in KORA|RED. It fixes 73% of cases. She tunes the tool-use prompt.
Wednesday Assigns it to two billers for an internal pilot. They surface two edge cases she hadn't thought of.
Thursday Fixes them. Score climbs to 89%.
Friday Her admin reviews the eval results, hits Promote, and the agent goes live for the whole RCM team Monday morning.

That's the difference between AI as a long-running consulting engagement and AI as something your operators actually operate.

The Compliance Conversation

The first question every healthcare CIO asks is some variant of: "You're letting non-engineers build AI in our environment — how is that safe?"

The honest answer: it's safer than the alternative. The alternative concentrates risk in a small ops team that's chronically backlogged, frequently working from incomplete context, shipping to production on a quarterly cadence. The citizen developer model distributes building, but centralizes promotion. The number of people who can put something live actually goes down, not up.

  • Every agent runs inside the citizen developer's organization context. There's no path to read another org's data.
  • PHI handling, encryption, masking, and audit logging are platform features — not agent features. A citizen developer can't accidentally turn them off.
  • The promote action is auditable, attributable, and reversible.
  • All wrapped in SOC 2 Type 2 and HIPAA-monitored controls.

You're not handing the keys to the patient record to anyone. You're handing the keys to the agent design environment to the people who already understand the workflow — and keeping the keys to the production door right where they were.

Who Should Be a Citizen Developer?

Not everyone. The role is a privilege and a responsibility. The citizen developer profile that succeeds has three traits:

Deep workflow knowledge
They can describe the work in steps, exceptions, and judgment calls — not in vague outcomes. They are the person others ask when something breaks.
Comfort with iteration
They know v1 will be wrong, v3 will be useful, and v6 will be great. They're not hunting for a one-shot solution.
Respect for the gate
They actively want an admin to review their work before it goes live. They are the residents who appreciate the attending's signature, not those who resent it.
Where to start
One citizen developer per major service line. Let them build two or three agents end-to-end. Use what you learn to write your internal playbook. Then expand.

Ready to Close the Role Gap?

The most important shift in healthcare AI isn't about better models — it's about who gets to build, integrate, and deploy them. Let's talk about how to get started with citizen developers in your organization.

Explore the KORA Platform →