AI agents are beginning to send messages, make purchases, and act on our behalf. As assistance becomes authority, the most important question may be how much permission we are willing to hand over.

*** AI has spent years giving us answers. Now we're letting it act. ***
For most of the AI era, the relationship has been simple. We ask. The machine answers. We decide what happens next. That boundary is starting to move. Meta's new Muse agent is designed to do more than recommend what you should do. It can send emails, arrange travel, and complete transactions on a user's behalf. The interesting part is not that AI suddenly became intelligent enough to understand those tasks. Systems have been able to recommend flights, draft messages, and compare products for some time. What changed is the permission. There is a meaningful difference between asking an AI to find me a flight and allowing it to book one. Between asking what I should buy and telling it to buy it. Between asking how I might sell my car and giving it permission to handle the transaction. The intelligence required may barely change. The authority does. We have spent years asking how smart artificial intelligence will become. As agents move from answering questions to taking actions, I think there is a more important question: ** What are we willing to let them do? **
We tend to treat these interactions as if they are separated only by convenience. They are not. “Find me a good flight” asks the system to help me think. “Book me a good flight” asks it to act on my behalf. “What should I buy?” is a recommendation. “Buy it” is a transaction. “Help me sell my car” leaves the decision with me. “Sell my car” transfers part of that decision-making authority to the system. The intelligence required may barely change. The permission does. That distinction matters because advice is easy to reject. If an AI recommends the wrong restaurant, misunderstands what I wanted, or suggests a terrible product, I can ignore it and move on. Once the system acts, the mistake becomes real. Money moves. Messages get sent. Reservations are made. Agreements are accepted. Something in the world changes because the system was allowed to change it. That does not make agentic AI inherently dangerous. In many cases, letting a system complete the task is exactly what makes it useful. But usefulness should not blur the difference between assistance and authority. For years, we have measured AI progress by what systems are capable of understanding and producing. As agents become more common, we may need another measure. Not just what can the AI do? But what have we given it permission to do for us?
Nobody wakes up and decides to hand over meaningful control of their life to an algorithm. It happens in smaller ways. First, the system remembers what I like. Then it gets access to my calendar. Then my email. Then my location. Then my payment information. Each permission makes the next interaction a little easier.
Eventually, asking the system to complete the task feels like the obvious next step. If it already knows my schedule, my preferences, and my budget, why should I search for the flight myself? If it has already compared the options, why should I fill out the checkout form? If it can draft the message, why not let it send it? Each individual decision is reasonable. That is what makes the accumulation important. Convenience rarely arrives as a dramatic surrender of control. It arrives as a series of small permissions, each one saving a little time, removing a little friction, and making the next permission easier to justify. The concern is not that one click changes everything. It is that, over time, the boundary between assistance and authority can move without us noticing how far it has moved. By the time the system is acting on our behalf in dozens of small ways, we may no longer think of those actions as delegation at all. They will simply feel like how things work.
Advice can be inconvenient when it is wrong. Action can be expensive. If an AI recommends the wrong hotel, I can ignore it. If it books the wrong hotel, I now have a reservation to cancel, a charge to dispute, and possibly a trip that has already been affected. That difference becomes even more important when agents move beyond travel and shopping. A mistaken recommendation about insurance, a financial product, a purchase, or a contract is one thing. Allowing the system to act on that recommendation introduces a different category of risk. Now the questions become practical. Who actually authorized the action? How much discretion did the user grant? What happens if the system misunderstood the instruction? Can the action be reversed? Who is responsible if it cannot? Those questions are part of why banks and other institutions are paying close attention to agentic commerce. Once an AI can transact on a user's behalf, fraud, identity, payment security, and consumer protection all become harder to separate from the convenience of the system itself. None of this means agents should not act. It means action deserves a different standard than advice. The more authority we give a system, the less useful it is to ask only whether the model is intelligent enough. We also have to ask whether the permissions, limits, and recovery mechanisms around it are good enough.
Human involvement does not disappear all at once. It moves. At first, the person makes every decision and the AI offers suggestions. Then the AI begins preparing actions for approval. After that, people may only review exceptions. Eventually, the human may receive a summary of what already happened.
Each step can make sense on its own. If a system is accurate most of the time, reviewing every action starts to feel inefficient. If only a small percentage of cases need intervention, it is tempting to move the person further downstream and let the system handle the rest. That can be a perfectly reasonable design.But it changes the role of the human from decision-maker, to approver, to exception handler, and finally to observer.That progression matters because oversight is not the same thing as participation.
A person who approves every action is still actively involved in the process. A person who only sees failures is interacting with the system very differently. The question is not whether humans remain somewhere in the loop. It is where in the loop we place them, and how much authority remains when they get there.
This is one of the arguments underneath The Comfortable Apocalypse. I am less interested in a machine taking control than I am in people repeatedly deciding that control is inconvenient. That is a much easier future to imagine because it does not require rebellion, deception, or some dramatic moment when AI becomes too powerful to stop. It only requires systems that are useful enough that asking for permission every time starts to feel like unnecessary friction. So we let them remember more. Access more. Decide more. Act more. Not because we were forced to. Because it made life easier. That is why I think permission may matter more than intelligence in the next phase of AI. Intelligence tells us what a system is capable of doing. Permission determines what it is allowed to do on our behalf. And as those permissions accumulate, the real question is not whether AI can act. It is whether we are still paying attention to how much authority we have handed over.
Where do you think the line should be between AI giving us advice and AI acting on our behalf?
I’d genuinely like to hear how you think about it, so leave a comment below.
I publish a new essay every Thursday on AI, technology, human agency, and the choices we are making as these systems become part of everyday life.
Sign up for the newsletter and I’ll let you know when the next one is published.
The Conversation
Comments
Loading comments...
Join the Conversation
Leave a comment.
I read every comment. Comments are reviewed before appearing publicly.