The undo boundary matters as much as the edit path. I'd make each agent action a reversible transaction and scope its undo to that action, so it can't accidentally revert a human edit made afterward. I'd also test a human changing the same record while the agent is still running. That's where a single source of truth can still fail if the workflow doesn't define ownership and conflict behavior.