Anyone here running AI agents that can actually write to production systems?

I’m trying to talk to people who have crossed a pretty specific line with AI agents. Not copilots that suggest an action. Not agents that prepare something for a human to approve. Not read-only agents. I mean agents that are actually allowed to change state in production. Things like updating a CRM or ERP, changing an order, issuing a refund, modifying permissions, triggering workflows, writing to a database, or calling APIs with real side effects. I’m curious what happens operationally once you get to that point. For example: An agent says it issued a refund. How do you establish whether it actually happened? A request times out and the agent retries. How do you know the external action didn’t happen twice? Someone questions one particular action months later. Can you reconstruct what the agent saw, what it decided, what it sent, and what actually changed? And who owns this internally once agents are doing consequential things? The agent team, platform, security, risk/compliance, someone else? I’m especially interested in hearing from people who are already dealing with this in production, rather than discussing how it theoretically should work. If you’re running agents with real write access, I’d love to compare notes. Happy to grab a virtual cofee for 20 minutes (coffee is on me) but I also know nobody needs another meeting. If async is easier, I can just send you a handful of questions over DM. Feel free to DM me, or share what you’ve learned in the comments if you’re comfortable doing so.