An agent can choose among permitted steps or tools. Its access, limits and approval rules still need to be defined.