An agent that is right nine times in ten is very useful for reading and a liability for writing to the people you do business with. The two jobs carry different costs when they go wrong, so they get different rules.
Four levels, set per tool
An owner gives each connected tool one of four levels: off, read, draft or act. Read and draft run when asked. Act waits for a person to approve each call, and the approval shows exactly what would be sent. Bomuno suggests act for any tool that can change things, so read or draft should only be chosen for a tool you are sure doesn't.
Bomuno never sends mail through Gmail. It writes a draft, and the draft sits in your Gmail until you send it.
Knowing when to stop
Every run has a spending limit and a step limit, and the same call is not made twice. What it did and why is kept for every run.
The limit of this rule
The person an agent works for can approve its own request, so approval is not always a second person. A person's own request does need someone else. If your work needs two people on every action, tell us before you rely on this.