An agent that passes a demo and a process that survives an audit are different problems.
The second one needs the work around the model: the contracts it runs under, the traces it leaves, the point where it stops and asks a person, and the number it has to hit on your own cases before any of it counts.
Ordinary software either works or it doesn't. Put a model in the middle and the same input can come back different — so we don't promise it works. We agree the pass rate, on work you've already done, before anything is built.