“Glean recommends that any agent designed to mutate enterprise state, such as modifying a database, should be implemented as a "human in the loop" agent.”