Complete procedures with a way back.

Build a bounded Responses API agent whose strict function calls are treated as proposals, whose deterministic state and policy select eligible tools, whose consequential actions require exact human approval, and whose adapters use durable idempotency, effect-aware retries, deadlines, safe outputs, correlated audit and full-bundle rollback.

Connect models to real capabilities with strict schemas, deterministic policy, human approval, idempotent execution, bounded retries and complete audit evidence.