Where are the agent autonomy bounds — can an agent act without my approval?

You choose. Agents are scoped to the objects, tools, and workspaces you grant them. Every read and write is a logged event you can inspect. Skills (the layer that defines agent behaviour) can require an explicit human @mention before high-stakes actions — that's how our own setup works. Pause or stop any agent session from the UI at any time.