AI database agents should not have only two modes:

answer

fail

Real workflows have uncertainty.

A metric definition is ambiguous. A tenant filter is missing. A result is partial. A query is safe to prepare but not safe to execute. The model has enough evidence to suggest an answer, but not enough authority to act.