Anything touching money or leaving your workspace waits for a named owner to approve it. An agent can prepare the action, but it cannot approve its own work.
The rule that never bends
Money and anything outbound — a client email, a public post, or a contract sent for signature — always becomes an approval card that a workspace owner has to approve before it runs. The agent cannot self-approve, no matter how routine the action looks.
Bounded by design
- Each agent is bounded — a hard risk ceiling and a kill switch, so one agent can never borrow another’s authority.
- Agents run as the person who asked, with that person’s own permissions — never more.
- Sensitive actions append to an audit log as they happen, so there’s a written record of what happened and who approved it.
The result is an assistant that moves fast on the low-risk parts of the work and stops, visibly, at the parts that need a human decision.