Locked learning resources

Join us and get access to thousands of tutorials and a community of expert Pythonistas.

Unlock This Lesson

Locked learning resources

This lesson is for members only. Join us and get access to thousands of tutorials and a community of expert Pythonistas.

Unlock This Lesson

What It Can Touch, and Who It Acts As

When you connect an assistant to your email, calendar, or online drive, you give it a way to act in those apps. The agent does that work through your account, with your name on it.

It Acts as You

Connecting an app usually means signing in and clicking Allow. From then on, the agent can do whatever that connection allows, like reading, sending, or editing, and it does it as you. An email it sends comes from your address. A calendar invite comes from your calendar. An order goes on the company card saved in your account.

Websites and apps usually can’t tell the agent apart from you. Some agents don’t tell websites they’re agents, so to the site they look like a person using a browser. When something goes wrong, the people on the other end see your name on it.

Asking Before It Acts

Before an agent does something that’s hard to take back, like sending, buying, or deleting, the app usually stops and asks you first. Those prompts come from the app, which checks with you before it carries out what the model asked for in the agent loop. They’re your chance to read what’s about to happen and say no.

Locked learning resources

Join us and get access to thousands of tutorials and a community of expert Pythonistas.

Unlock This Lesson

Already a member? Sign-In

Locked learning resources

The full lesson is for members only. Join us and get access to thousands of tutorials and a community of expert Pythonistas.

Unlock This Lesson

Already a member? Sign-In

00:00 What It Can Touch, and Who It Acts As. When you connect an assistant to your email, calendar, or online drive, you give it a way to act in those apps. Connecting usually means you sign in, and you allow access.

00:14 From then on, the agent can do whatever that connection allows, like reading, sending, or editing. And it does it as you.

00:22 An email it sends comes from your address. A calendar invite comes from your calendar. And an order goes on the company card saved in your account.

00:32 Websites and apps usually can’t tell the agent apart from you. Some agents don’t tell websites they’re agents, so to the site they look like a person using a browser.

00:41 When something goes wrong, the people on the other end see your name on it. Before an agent does something that’s hard to take back, the app usually stops and asks you first.

00:51 That covers things like sending, buying, or deleting. These prompts come from the app, as part of the agent loop. They’re your chance to read what’s about to happen, and to say no.

01:02 Many apps let you approve everything at once, or turn the prompts off for a task. That makes the work go faster. It also means the agent sends, buys, and deletes without anyone checking first.

01:14 You may also hear about a sandbox. That means walls around an agent that limit what it can touch. For example, a separate computer in the cloud, with none of your files on it.

01:25 Some of what an agent does stays inside the chat, and you can throw it away. Other actions reach the outside world. A sent email is in someone else’s inbox.

01:36 A purchase has been charged. And a deleted file may be gone for good.

01:42 Those actions stay done when you close the chat, delete the conversation, or stop the agent. Anything that stayed in the chat can be undone by not using it.

01:51 Anything that reached another person, a store, or your accounts has to be fixed out there, if it can be fixed at all. So before you approve an action, ask whether you could take it back.

02:03 Most assistants list their connections in their settings. Look for a page with a name like Connectors or Integrations, and open each connection. It shows what the assistant can do there.

02:13 It might only read. Or it might also send, change, or delete as you.

02:19 Before you connect an agent to client data, your work email, or a shared drive, ask four questions. Where does it run? What can it touch? Does it keep going after you leave?

02:30 And whose account does it act as? If you can’t answer one of these, find out before you hand it anything.

02:37 So an agent acts as you, and some of what it does can’t be taken back. Below this video, you can sort an agent’s actions by whether you could take them back.

02:46 Then, in a practice app, you can disconnect the apps you don’t use, and turn off what your tasks don’t need.

Become a Member to join the conversation.