Don't give the agent any kind of wait or sleep tools and deny any attempt to read status without new progress notifications.