← All posts

Trust, cost, and adoption: why we give agents less

By Kyle Gwinnup

Trust, cost, and adoption

The most useful agent is not the most capable one. It is the one your team trusts enough to run on real work. So when we design the onebee platform, we optimize for trust first, because trust is what turns an agent from a demo into daily use.

The discipline that earns that trust also makes the agent cheap and reliable. We narrow an agent's scope so it costs less and fails less, then put a human in front of the few actions that carry risk. Trust earns the agent more work, and more work is the whole point.

Scope is the control surface

An onebee agent is bounded twice over.

The first bound is the agent definition. The definition states the job, the constraints, and the context the agent works within. It tells the agent what it is for and what it is not for.

The second bound is the set of tools you grant it. Tools are the agent's hands. An agent can read a calendar only if you give it the calendar tool. It can write to a CRM only if you give it the write tool. Nothing the agent decides to do can exceed the tools in its hands.

Most teams reach for capability first and add tools by default. We argue for the opposite. Start from the task, grant the smallest set of tools that completes it, and stop. The scope you withhold is not a limitation. It is the lever that controls both cost and reliability.

Fewer tools, fewer tokens

Every tool you grant an agent has a price, and you pay it on every turn.

A model does not learn your tools once. It receives their definitions, names, descriptions, and argument schemas as input on each call it makes during a run. Ten tools cost more input tokens per turn than three. A run that takes several turns pays that cost several times. The bill grows with the size of the toolset, not just with the work done.

A larger toolset also invites longer runs. Give an agent many ways to act and it will consider many paths, call tools it did not need, and take extra turns to recover from the detours. Each of those turns is another full request, another set of output tokens, another charge against your budget.

A smaller toolset reverses both effects. The per-turn prompt is shorter, and the agent reaches the answer in fewer turns. onebee records the cost of every turn, so the savings are not a guess. They show up in the ledger.

Fewer tools, fewer failures

The same constraint that lowers cost also raises reliability, and for the same reason. An agent fails where it has room to fail.

A tool the agent does not hold is a mistake the agent cannot make. Remove the delete tool and the agent cannot delete the wrong record. Remove the send tool and it cannot send the wrong message. You do not have to anticipate the error, write a guardrail for it, and test the guardrail. You remove the capability, and the class of error goes with it.

Narrow scope also makes behavior easier to predict. An agent with three tools has a small number of paths through a task. You can reason about those paths, review them, and trust the result. An agent with thirty tools has a combinatorial number of paths, and no one can hold them all in their head. Reliability is not only a property of the model. It is a property of the surface you expose to it.

Human approval on the actions that matter

Narrow scope handles the actions an agent should never take. Human approval handles the actions it should take only with a person watching.

onebee lets you mark a single tool as requiring approval. When the agent reaches that tool during a run, it does not act. It pauses and asks. The request is not a vague prompt. It carries the context of the specific call: the tool, the arguments, and what the call will do. A person reads exactly what is about to happen and approves it or declines it.

This is deliberate. You keep the agent autonomous on the safe, reversible work, where speed is the value. You require a human only on the few steps that move money, touch customers, or cannot be undone. The agent stays fast, and the person stays in control of the moments that count.

That control is what builds trust. A team trusts an agent it can stop. Once people see that the risky step always comes back to them, with the details spelled out, they stop fearing the autonomous steps. They let the agent do more.

Where to start

The three pillars compound. Narrow scope lowers cost and raises reliability at the same time, and a reliable agent that asks before it does anything irreversible is one people are willing to run. So we give agents less on purpose: less is cheaper, less is more reliable, and less, paired with a human on the actions that matter, is what earns the trust that drives adoption.

In practice, that means starting small. Build the smallest agent that does one job. Grant it only the tools that job needs. Put approval on the one tool you would not want it to run unwatched. Then run it, read the ledger, and widen the scope only when the agent has earned it.