Product design question

You need to ship the first agentic workflow product for defense analysts on a controlled network where internet access, model updates, and human review are tightly constrained. What is the MVP, which user/job would you target first, and what tradeoffs would you make among agent autonomy, user experience speed, and security/risk controls?

Practice this question out loud. An AI interviewer asks it, follows up like a real interviewer would, and scores your answer. Type or speak.

What this question tests

Tests MVP definition under extreme constraint, a controlled network with no internet and tight review requirements, and the tradeoffs that follow.

Target the first user and job narrowly, for example an analyst summarizing a specific class of intelligence report, rather than a general purpose research assistant.
Define the MVP around a single, well bounded workflow that works entirely with locally available models and data, since internet access is not available.
Constrain agent autonomy heavily at launch, requiring human review and approval at every significant action, given the security and risk controls required.
Accept slower user experience speed as an explicit tradeoff for stronger security and risk controls, since this environment cannot compromise on the latter.
Design update and model refresh processes to work within controlled network constraints, such as periodic offline package updates rather than live model updates.
Expand agent autonomy only after a track record of reliable, reviewed output builds trust with the security stakeholders.

Explicitly accepts slower experience speed as the deliberate tradeoff for security, correctly ranking the priorities given the controlled network context described.
Scopes the MVP to a single bounded workflow that works entirely offline, rather than assuming any connectivity the environment does not actually have.
Proposes expanding autonomy only after a proven track record, treating trust as something earned incrementally rather than assumed at launch.

Designing an MVP that assumes any internet connectivity or live model updates, which the controlled network explicitly rules out.
Prioritizing user experience speed over security and risk controls in an environment where that tradeoff is not acceptable.

How would you handle model updates in an environment with no internet access at all?
What would convince security stakeholders to expand the agent's autonomy over time?