Tool access
Can the agent inspect the places where work actually happens?
Key work lives in accessible systems, not only in someone’s head.
Permissions can be scoped by workflow and risk level.
The first workflow has clear source systems: inbox, docs, CRM, tasks, CMS, analytics, or calendar.