An AI agent can be impressive in a demo: it reads a request, selects a tool, and completes a task with little intervention. But an agent that changes a live system needs a different kind of capability. It needs to know when not to act. A useful way to think about agent autonomy is not “How many steps can it perform without asking?” but “How much uncertainty can it safely resolve before an irreversible action?” Those questions lead to a more practical design for agents that create accounts, pu...