The agent loop should think and propose. The agentic system control plane should decide—enforcing policy, approvals, audit logging, retries, rollback/compensation, and escalation before side effects happen.