Identity comes first
An enterprise agent should only see the knowledge and actions permitted for the authenticated user and the agent role. Identity and authorization must determine what can be retrieved, generated or executed.
Tool access needs boundaries
A read-only lookup, a draft action and a production change carry different risk. Each tool needs an explicit permission boundary, input validation and a clear rule for when human approval is required.
Evaluate agents before and after release
Accuracy, refusals, escalation, and tool-use behaviour should be tested against controlled business scenarios before release and throughout operation.