Your agent stops
at the refund.
It reads the case, checks the order, and proposes a refund. Then a person opens the same screens and presses the button.
keep the handoffEvery action waits.The agent can draft, but it cannot finish.
or
give it the keyEvery action can run.The tool can execute, but the key cannot express your limits.
What if it could finish only the actions you authorized?