For me the line is anything irreversible or anything that costs money: refunds, deleting data, messaging customers in bulk. Below that line the agent can act, as long as every tool call is logged with its input and result, so you can replay what it actually did. The detail I'd...