Can the agent make changes in the system itself, or does it only make suggestions?

That is your decision and it is set separately for every operation. By default we recommend a mode in which the agent completes cases that pass all checks on its own and prepares a proposal for approval for the rest. Operations that change data or go out to a customer stay subject to human confirmation until the measured numbers show it is no longer needed.