For AX, CreateTask/ResumeTask controls the sandbox, not prompts. A gated one-shot command can invoke a CLI or acpx, report explicit completion, then delete. A suspended reusable Task needs a request endpoint or mailbox; A2A is a ready network contract, with ACP/CLI behind it.