Triage for a real inbox or queue, for one real user: a club, a shop, a team at work. Sort every action by reversibility, put a human approval gate in front of anything that cannot be taken back, give the agent memory that survives sessions, and leave a paper trail that answers "who approved that?" in seconds. Nothing outward-facing moves without a person saying yes to that specific action.
It ends with
A deployed agent with an audit log, gates where they belong, and its first real traffic beginning to accrue.