A background agent accepts a task, works asynchronously in an isolated environment, and later returns evidence, an artifact, or a blocking question. It requires durable state, bounded authority, and clear escalation rules.