Regarding your setup, every agent builder should be equipped to resolve three specific issues related to runtime governance. You must be able to state the very last operation your agent completed, determine if it can perform actions that you are unable to instantly rollback, and calculate the time necessary to rescind all access rights immediately. If those answers are missing, you should make finding them your priority.
Read about the new Civic: