Security
What the agent can do, and what it cannot.
Security here is mostly a question about blast radius. Every listing answers it in the same words, so two agents can be compared without reading two sets of marketing.
Identity and scope
Per-agent identity, scoped short-lived credentials, and audit logs that distinguish agent actions from human ones.
Approval gates
Every write waits on a named human. Writes cannot be set to automatic on a first install.
Reversibility
Committed writes keep a before-image and revert in one click for 30 days. Acts that leave the building — a sent email, a filed claim — cannot be recalled, and are labelled as such.
Evidence
Every outcome carries the material it was decided on, exportable so an auditor can re-perform the decision.
The boundary is on every offer page.
Read a contract