"Can act" is not the same as "has enough evidence to act"

Everyone talks about what an agent should be allowed to do What tools it can use What data it can access What actions it can take But I think there is a question before all of that Does it actually have enough evidence to act An agent can have the right permissions and still be working with incomplete or unreliable information Permission does not make bad information reliable To me these are different things Authority means it is allowed to act Evidence means there is enough information to justify the action Execution means actually doing it A system can get the first one right and still make a bad decision because the second one was never checked So I am wondering where this check should live Should the agent itself be required to stop when the evidence is not sufficient or should that decision happen outside the runtime Curious how people building agents are thinking about this