Quick summary Evaluate the entire trajectory: tool calls and state changes matter as much as an agent’s final answer. Budget for the whole task: repeated retrieval, retries and long-running execution change operational cost. Use layered controls: permissions, checkpoints, monitoring and recovery need deliberate ownership. Keep authority bounded: greater model capability does not replace application-level safeguards […]