An advertising account is unusual among the things an AI agent can be pointed at: the damage is immediate and it is money. A wrong message can be apologised for. A campaign switched on at the wrong budget has spent the money by the time anybody notices.
So the split here is not a setting. An agent is given the call that reads and the call that proposes, and never the call that applies. There is no mode in which it gets the third one, because the point of the arrangement is that the third one is a person.
What that buys
- A proposal is validated by Google as it is written, so what a person is shown is a change that would really run — not a guess that fails halfway.
- A change runs in one piece. Either all of it happened or none of it did, so there is no half-applied account to work out afterwards.
- What undoing it would take is read out of the account before the change is made. Afterwards the old values are gone, which is why it cannot be done then.
- The record is the same whether a change came from the API or from a project room, so the account has one history and not two.
The part that is still yours
None of this says a proposal is a good idea. It says a proposal cannot spend your money by itself. Somebody still has to read the one line it was written with, look at what it would do, and decide — and on an account that specialists look after, that somebody knows Google Ads.
The same reasoning is why budgets cannot be proposed at all. A bid is an argument; a budget is the ceiling on what the argument can cost, and it is not an agent's to move.
Questions people ask
Is there a setting that lets an agent apply its own proposals?
No, and that is deliberate. The tool that applies a change is never offered to an agent, in any configuration, so there is no switch to leave in the wrong position.
Does this make the agent less useful?
It makes it slower by one step, and the step is a person reading one sentence. Everything expensive — working out what is wasting money, writing the operations, checking them against Google — has already happened by then.
What about an account somebody else looks after?
Then the person on the end is one of their specialists rather than one of yours. The split is the same; who stands in the gap is what changes.