Where should agent access sit in the stack?

Picture the stack in three layers. The app and its business logic at the bottom. The agent at the top. In between, the access layer. The part that decides what the agent can see and touch. Most software today has no middle layer. The agent reaches straight into the interface. Where would you draw the middle layer in your stack.