Each agent has two autonomy settings: "approve everything" (every message waits for you) or "let safe replies go" (a reply based on your documents, with no hidden instruction, goes on its own; everything else waits).
Prospecting always waits for your approval first. The command bar asks for a ticked confirmation before any action that sends a message.
In your workspace: open the screen