Autonomy changes architecture
An agent that can invoke tools creates a new execution path across enterprise systems. Architecture review must examine permissions, dependencies and failure boundaries as well as the model’s output.
Define bounded execution
Separate recommendations from actions. Set permitted tools, data access, transaction limits and human approval points. Design for revocation, monitoring and recovery when a system behaves outside its intended boundary.
Make authority inspectable
Keep a record linking the use case, accountable owner, delegated permissions and operating evidence. Expand autonomy only when the consequences and controls can be explained to the people responsible for the service.