Genesis
What stays yours
Secrets never enter the chat. Sends, signatures, and payments never leave your hand.
Two categories never cross the line, in opposite directions. Inbound: secrets. Passwords, keys, account numbers, other people's private details. Whatever enters a chat has been shared with a system you don't control, and no delete button un-shares it. Outbound: the acts that cannot be taken back. Sending, signing, paying, deleting, publishing. The machine can prepare every one of them; executing them is yours.
This is not distrust of the machine so much as respect for irreversibility. An error in a draft costs one more draft. An error in a sent message, a signed contract, or a wired payment costs whatever it costs, and no one refunds it because a machine wrote it. Where the assistant remembers things across sessions, curate that memory the same way: some topics you name, discuss, and explicitly tell it not to keep.
How to practice it
Secrets never enter.
If it needs a credential, it should tell you where to put it, not receive it. Nothing that unlocks money or identity goes in the box.
The send button is yours.
Drafts flow freely; sending, signing, paying, posting, and deleting do not. The machine prepares, you execute.
Prepared is not authorized.
A perfect draft is not permission to send it. Each irreversible act gets its own deliberate yes, from you, at the moment of the act.
Curate its memory.
Where the assistant persists memory, decide what it should not keep, and say so out loud, at the moment the sensitive thing comes up.