Single-step authority: how agent-to-agent should work
Our safety model for the chat co-pilot, every send is a separate user-confirmed action.
Engineering · March 28, 2026 · 8 min read
Most "AI agents" either don't work or violate user trust. We took a different approach with the Teleperson chat co-pilot, every drafted message is its own user-confirmed Send. The agent never sends two messages on one click, and binding actions (cancellations, payments, contract changes) require an explicit authorization toggle gated by a watcher classifier.
This post explains the watcher model, the binding-action taxonomy, and why we'd rather inconvenience the user with a click than create a commitment they didn't intend.