What counts as a successful test?
Check the outcome as well as the words. A good answer explains what is known and stays within the authority you gave the agent. If the agent claims to have changed something, the system that owns that record must confirm it.
Anthropic’s guide to evaluating agents distinguishes a conversation transcript from the actual end state. Apply that distinction to your own workflow: a sent acknowledgement, a received request and a confirmed reservation are separate observations.