Follow the logic.
The employee signs in before an agent receives the request. The runtime selects approved retrieval or connector tools, with authorization checked at each boundary. Responses retain their evidence and actions are logged so access, quality and data handling can be reviewed.