The basic idea
An agent may call tools, evaluate results and select subsequent actions to pursue a goal. Its scope should be bounded by permissions and available tools.
An educational example
A study assistant could classify questions for a selected topic and prepare a revision list. A teacher should verify that the resulting list is appropriate and accurate.
Control points
Minimise data sharing, limit tool permissions and require human review for important actions. Tool outputs may be wrong or misleading, so verification belongs in the workflow.