Action Space
The complete set of things an agent is permitted to do — its tools, APIs, and permissions.
The action space defines what an agent can reach. Too small and it cannot finish the job; too large and it makes more mistakes and expands the blast radius of each one. Scoping it deliberately is a security control, not a configuration detail.
In practice: Read the calendar and send invites — but not delete events or email externally.