"Agentic advertising" has become one of those terms that absorbs whatever meaning is convenient. Vendors use it to describe campaign dashboards with automated rules. Consultants use it to describe fully autonomous systems buying and selling media at machine speed. Somewhere in between, buyers, publishers, and platforms are trying to make procurement decisions based on claims that do not share a common referent. This piece offers a working definition and, just as importantly, draws the lines around what agentic advertising is not.

What does "agentic" mean in the context of AI systems?

The word "agentic" in AI research has a reasonably precise meaning: a system that takes actions in pursuit of goals, rather than simply producing outputs in response to prompts. An agentic system receives a brief or objective, determines what actions are needed to satisfy it, takes those actions, and responds to the results of those actions in sequence. It does not require a human to specify each step.

Applied to advertising, an agentic system receives a buying brief, identifies candidate sellers and inventory, negotiates terms, and commits to deals within the parameters of the brief. Each of those steps involves judgement: which sellers to approach, how to open negotiations, how to balance competing deals against a portfolio-level budget, when to walk away. That is a materially different activity from executing pre-specified rules. A rule executes when its trigger condition is met. An agent reads context and decides how to act.

What is the working definition of agentic advertising?

A workable definition: model-driven systems taking consequential actions within a defined brief, with human approval rights at named decision points, and a record of what was committed and why. Four elements, each carrying weight.

Model-driven. The decisions are made by an AI model interpreting context, not by a rule engine matching conditions to actions. The distinction matters because a rule cannot respond to novel situations. A model can.

Consequential actions. The system is doing something that creates obligations, costs, or commitments. Generating a report is not consequential in this sense. Committing to a media contract is. If nothing is actually at stake, calling it agentic is a category error.

Human approval rights at named decision points. Fully autonomous operation is not agentic advertising as defined here. In a governed agentic system, there are identifiable moments where a human has the right to review, redirect, or halt the action. Those moments must be defined before the system operates, not discovered after the fact. Autonomy is not absent from this model, but it is earned and bounded.

A record of what was committed and why. If the system cannot produce an auditable account of its decisions and commitments, the system cannot be held accountable. Accountability requires evidence. Governance without a record is theatre.

What is agentic advertising not?

Three things are frequently described as agentic but are not, and the distinction is worth making plainly.

Rule-based automation is not agentic. A bidder that applies pre-specified rules — increase bids when viewability exceeds a threshold, cap spend on any one domain at 10% of budget — is not reading context or exercising judgement. It is executing instructions. Rules are deterministic and, in principle, fully legible to the person who wrote them. An agentic system is not deterministic in the same way. Its outputs depend on context that the human operator did not fully specify in advance.

AI-assisted buying is not agentic buying. When a human planner uses an AI system to generate recommendations, and then reviews those recommendations and commits to deals manually, the human is the buyer. The AI is a research or analysis tool. The consequential action is taken by the person. This is valuable work, and it is a legitimate precursor to more autonomous systems. It is not agentic in the sense defined here.

Fully autonomous AI without human approval rights is not governed agentic advertising. A system that commits to deals, adjusts plans, and makes portfolio decisions without any human review or defined approval rights is a different category. The absence of a human in the loop is not a feature to advertise to buyers. It is a governance gap.

Where do most current deployments actually sit?

Most live deployments that use the word "agentic" are closer to the AI-assisted pole than the agentic pole as defined here. That is not a criticism. It is a description of where the technology and the industry's readiness for it currently sit. Buyers have legitimate reasons to want to understand what they are buying, and vendors have legitimate commercial reasons to describe their offerings in terms of where the market is heading rather than where it currently stands.

The problem is that conflating AI-assisted, rule-based, and genuinely agentic systems makes it impossible to evaluate them against each other, set realistic expectations, or hold systems accountable when they fail. It also makes it impossible to have a meaningful conversation about readiness. If everything is agentic, nothing is, and the question of whether a given system is ready for a given level of autonomy cannot be asked, let alone answered.

How should buyers evaluate vendor claims against this definition?

Three questions cut through the noise. First: what is the system actually doing when it acts? If the answer is executing rules, it is not agentic. If the answer is a model making judgements from context, it may be. Second: what are the named human approval points? If there are none, the system is either not yet agentic (still AI-assisted) or ungoverned. Third: what does the deal record show? If the system cannot produce evidence of what it committed to and why, accountability is not possible.

None of these questions require technical expertise to ask. They require only that buyers insist on precise answers rather than accepting marketing language that gestures at capability without demonstrating it.

Why does imprecision carry real commercial consequences?

If a buyer signs a contract expecting an agentic media buyer and receives what is effectively a rule-based optimiser with a conversational interface, the failure will not become visible until performance is poor. By then, the cause is difficult to isolate, and the commercial damage has already occurred.

More importantly, if the industry does not agree on what agentic means, it cannot develop standards for what agentic systems must demonstrate before taking autonomous action on behalf of clients. There is no shortage of vendors willing to fill the definitional vacuum with self-serving language. The buyers and publishers who stand to gain most from genuine AI buying capabilities are precisely the ones with the most to lose from that confusion.

Precise language is not pedantry. In a market where vendors compete on the basis of AI capabilities that vary enormously in maturity and scope, imprecise language is a commercial liability for buyers and a governance risk for the whole supply chain. The working definition offered here is a starting point. But starting somewhere specific is the only way to have a useful conversation.