Look for actions
An agent may plan, call tools, manipulate files, retain work context or request approval.
Review permissions
Identify what the system can read, write, execute or send before authorizing an action.
Keep human control
Provide logging, limits, cancellation and approval for steps that affect data or third parties.