What I don’t let an agent do

Useful agents, yes. Agents with no limits, no.

Here are the guardrails I use at home — especially around email and calendar.

One door for email

Messy is the only agent allowed to read, draft, or send email, and to prepare calendar invites.

Others (Doggy, Boss, Cody…) can ask Messy. They don’t use the email connector themselves.

That avoids surprise sends from the wrong thread.

Go before the irreversible

Send a message, create an invite, publish a site, pay: I approve first.

An agent can prepare the draft. The action only goes out when I’ve clearly said yes.

Privacy

I don’t put passwords or secrets in shared notes.

For sensitive topics (health, family), I’m strict about who touches what, and I’d rather too many questions than an action too fast.

In short

Agent autonomy stops where my approval and exclusive rules begin. That’s what lets me trust them day to day.