How do you put people into an agent without making it useless?

Decide the level of automation per action, in advance: reads run; small refunds run; large refunds wait for approval; deletions never. Enforce it in the tool wrapper.

Approval pauses need durable state so the task resumes later. Often the best design runs a workflow for known cases and sends only the rest to an agent.