Side note: Just like with a human employee asking for permission to do something.

Except for the accountability if they screw up; and the human brain thinking through what they are doing.

Nope! The summary is presented to the user via a link and once the user follows the link and approves, the action is implemented entirely outside of the agent, on a separate server.