Where do you actually draw the line on AI agent autonomy?

I've been thinking about where the cutoff should be once an AI agent can actually take actions. Reading data is pretty low risk. Having an agent update a CRM record is a different story. Sending an email, deleting something, approving a payment, or making a change in production raises a completely different set of questions. I don't think the answer is simply "wait until the models get better" either. A reliable agent can still run into bad data, an unexpected situation, or a decision where the right thing isn't obvious. I'm interested in where other people draw that line. What action would you still require a human to approve, even if the agent had an extremely strong track record?