Could you please tell us more about your setup, project harness etc? not permissions (we all work with "Auto"), but what you actually told the agent it should/could do.

And how did you intervene? Does it have permissions to send emails, or it only created the draft?

This is a pretty interesting example and highly relevant, but details matter a lot if we want to use it as a lesson.