Scope
- One agent. Pick the loudest one — the one your team already worries about. Don’t pilot on the safe agent.
- One tool surface. A single class of calls (e.g. “send email,” “create ticket,” “wire transfer”). Twenty tools is post‑pilot.
- HIL on for Yellow tier. The Slack approval flow is the point.
- Observe‑then‑enforce. First week observes and records; second week flips the verdicts to enforcing.