How much independence should an AI agent have, and how do we control it?

“Only as much as the consequence of being wrong justifies. Grant the least access the job requires, put approval points where actions become hard to reverse, log what it does, and keep a way to stop it. Capability should never automatically become permission.”