Most people who start using an AI assistant for work discover the same thing within a week. The assistant is very good at reading, summarizing, and drafting, and it is quick to do all three without asking. That speed is useful. It also hides a question that deserves an answer before the tool gets any further into your day: which actions are reversible, and which are not?
A useful rule is short enough to remember. Five verbs should always wait for a person's yes: publish, send, pay, delete, and submit. Everything else in an ordinary task list can usually run free. Reading an inbox, summarizing a document, drafting a reply, pulling figures from a spreadsheet, and sorting items by urgency all leave the world the way it was. If the output is wrong, you throw it away. Nothing reached another person, no money moved, and nothing was lost.
The five verbs are different because each one crosses a line you cannot uncross. A published post is already read by strangers before you notice the typo. A sent email belongs to the recipient's inbox, and no amount of apology retracts the tone. A payment leaves your account. A deletion removes what you may have needed next week. A submission enters someone else's process, with its own deadline and its own reviewer. In every case, the cost of an error is not the time to fix a draft. It is the consequence that follows the fix.
The practical exercise is to take the work you already do and mark each step with one of two labels: free or gated. Start with a single real week. Write down every task an assistant might touch, then ask of each one a plain question: if this goes wrong at the wrong moment, can I undo it in thirty seconds?
Summarizing last quarter's support tickets passes easily. Drafting a reply to a customer passes too, as long as the draft waits in a place where you read it. Sending that reply does not pass, and it should be gated. Preparing an invoice is free. Paying it is gated. Clearing out a folder of old exports sounds harmless, yet it belongs on the gated list the moment a deletion cannot be recovered.
You will notice that gating does not mean refusing. The assistant still does the slow part, which is finding the material, writing the first version, and noticing the detail you would have missed. It stops at the threshold and asks. The person keeps the final verb.
It is tempting to rely on judgment alone: you will remember to check before sending. In practice, attention drifts when a tool is fast and usually right. The reviewer begins to approve by reflex. A gate built into the workflow protects you on the day you are tired, distracted, or trusting the output a little too much. A draft that waits in a queue, with a clear button to approve or discard, makes the decision visible at the moment it matters.
This is also why the free verbs deserve their freedom. An assistant that asks permission to read a file or summarize a thread becomes tedious within a day, and people then switch the whole safeguard off. Letting read-only work run means the gates stay meaningful, because they appear only where something real is at stake.
Take the list you wrote and circle the five gated verbs wherever they appear. Anything without a circle can run. For anything circled, decide who approves it and how quickly they can see the pending item. Then run the list for a week and notice where the gates fired. If a gate fires constantly on harmless work, the task was probably misclassified. If a gate never fires, check that your tool is not quietly performing one of the five actions under a different name.
The goal is not an AI that does nothing without supervision. It is one that does the reading, summarizing, and drafting quickly and fully, then hands you the few decisions that cannot be taken back. Sorting your tasks that way is the first step, and it takes about twenty minutes.
