Agents operating browsers, desktops and software surfaces with explicit permissions and recovery paths.