Never invents a number
Every price and total is arithmetic on the rate card; every answer is one the owner approved, sent verbatim. The model picks and drafts. It never prices and never freelances.
Nothing irreversible without a tap
Send, bill, book, publish, email a supplier: each waits behind an approval the operator or owner controls. Over-threshold quotes and every invoice draft hold for a person.
Checked before the spend
Per-client message and AI caps, agentic step and spend budgets, a daily send ceiling with a warm-up ramp, and a monthly search cap, all enforced before anything is spent.
A stall reads as a stall
Outside the send window, with no sending identity, or over the daily cap, a message is held and retried, never silently failed. Undeliverables surface; they don't vanish.
Doubt goes to a human
Already-paid, a dispute, the wrong person: the chase halts regardless of what the model thought. Ambiguous documents, unreadable files and near-ties all escalate.
The log is never rewritten
Events, ledgers, model calls and agent steps are insert-only. A balance is the sum of what happened, never a number someone typed. Even a privacy purge keeps the row so the counts stay true.
Trust is ratcheted up, never assumed
Every install starts in suggest-only. Going automatic takes a track record: enough reviewed messages, few binned, and a steady accuracy. Held categories are never lifted by a promotion.
Their brand, their data
The operator's brand and prices to the business; the business's brand to the customer. One statement, region-aware across many countries. And the operator can export the whole book as data whenever they want.