What you can't hand to an AI agent: the boundaries you set before launch

The conversation about boundaries usually turns into a list of fears: «what if it writes nonsense», «what if it sends rubbish to my clients». That is a bad conversation — it ends either in «let's not bother then» or in «it will be fine, we'll sort it out».

It is more useful to treat a boundary as part of the construction. Not a caveat, but a step at which the work stops and waits for a human. Then the question turns from «is this frightening or not» into «where exactly do we put that step».

There is one rule for placing it: the agent stops where the cost of a mistake is higher than the time saved. What follows are five places where that condition is met almost every time.

1. Professional judgement

Anything your field counts as advice: medical, legal, financial, psychological.

The boundary does not run along the topic, it runs along who the answer is addressed to. Writing a post about how oral hygiene works — fine. Replying in the comments to someone whose tooth hurts after a filling — not fine, and not because the agent would phrase it worse than the dentist. A remote recommendation without an examination is not care, it is risk: for the patient first of all.

The practical wording: the agent does not answer on the substance and passes the question to a human. Not «answers carefully», not «adds a disclaimer» — does not answer.

A separate case is regulated advertising. In medicine there are rules almost everywhere about what may be promised; before-and-after comparison imagery, for instance, is restricted in a number of countries. The agent flags places like that, but the decision is yours and your lawyer's, because it depends on the country and on the specific service.

2. Money and commitments

A refund, a discount, a credit, a deadline extension, a write-off, a payout. Anything after which somebody's amount or obligation has changed.

Two different prohibitions are worth keeping apart here:

• The agent does not move money. It does not initiate a refund, does not take a payment, does not withdraw funds. That is a technical limit, not an agreement to be polite.
• The agent does not decide whether the money should move. It gathers the facts — what was paid, when, what was promised, what your own rule says — and brings you something ready to decide on.

The difference between «prepared the refund and is waiting on the button» and «issued the refund and let you know» is the difference between a tool and a problem.

The same goes for prices and discounts in a catalogue. The agent will write the product description. It will not change the price.

3. Publishing under your name

Anything that goes out under a person's or a company's name: a post, a reply to a review, an email to a client, a proposal.

Technically the boundary looks like this: the agent prepares a draft and stops. The person whose name is on the text publishes it.

This is where people cut corners most often, and they should not. The temptation is obvious: if you have to read every post anyway, where is the saving? The saving is that reading something finished is faster than writing it from nothing — minutes instead of an hour. Sending without reading saves those minutes and buys a risk that on a bad day costs you a client.

A special case is replies to reviews. In a regulated field the reply must not confirm that the person was your patient or client at all, let alone discuss their case. This is the point where a clinic owner wants to «explain how it actually was» — and by doing exactly that breaches confidentiality. An agent never publishes a reply like that.

4. Personal data and consent

Photographs, documents, medical information, anything that identifies a person.

The boundary here is not «handle it carefully», it is «no consent, no material». If there is no signed consent covering publication, the work stops at the first step. Not «we'll blur the face», not «we'll crop the frame» — the material simply does not get prepared.

This is the one boundary of the five where going around it looks harmless and the consequences land not on you but on the person who trusted you.

5. Relationships

The most underrated one. Some decisions are right on the data and destructive on the relationship.

How to present a weak month to a client. Whether to say today that a deadline will slip or wait until it is certain. Whether to turn away a client your service does not suit — even when they are ready to pay.

An agent will not turn down money. That is not a flaw, it is the absence of what turning it down requires. And it will not soften a report or inflate one — but it also will not decide what tone bad news should be delivered in, because that decision is about people, not numbers.

The typical design mistake

The boundary gets written into a disclaimer instead of placed in the process.

It looks like this: the product description says «human review required», and technically the publishing happens by itself. While the attention holds, it works. A month later, on a Friday evening, somebody clicks OK without reading.

A checkable formulation: if the process cannot go further without an action from you, the boundary exists. If it can but is not recommended, there is no boundary, there is a preference.

What to ask yourself before launch

Go down the list and for each item say where the «with you» step sits:

• which questions the agent does not answer, however they are phrased;
• which action changes somebody's amount or deadline;
• what goes out under somebody's name;
• where consent is required and what happens when it is missing;
• which decision you would not hand to a new hire in their first week.

The last question is the most useful one. In that sense the agent is exactly a new hire: fast, never says no, without the context of your relationships with clients and without the feeling that something is off.

And the other side

Boundaries cost money. Every «with you» step is your time, and if you put in twenty of them you will not have an assistant, you will have an approval queue.

Which is why five, not twenty. Everything else — sorting the inbox, drafts, reconciliations, reminders, gathering material, formatting — is handed over whole, with no intermediate checks. The point of boundaries is that there are few of them and they stand in the right places.