Agent tool — always
get_task_context
report_progress
write_document
request_human_input
register_deliverable
finish_task
block_task
Agent tool — granted
— none in this scenario
Control plane (not exposed to the agent)
checkout / wake routingcontrol_plane_owned
budget · audit · replaycontrol_plane_owned