The context comes first
The system needs to know which records are authoritative, which instructions apply and what a completed task looks like. A collection of chat windows does not provide that structure.
Give each agent a bounded role
An intake agent prepares the request. A knowledge agent finds approved context. An operations agent performs a permitted action. A review step handles commitments and uncertainty.
Make recovery visible
A working system records outcomes, prevents duplicate commitments and routes failures to an owner. Expanding autonomy should follow verified performance within those boundaries.