The fear is rational
One wrong autonomous quote can destroy margin. One invented CMR sender can file a fiction. SMB owners are right to distrust demo videos that hide the send button.
Safety properties that matter
- Draft-only client communication on every channel
- Document fields grounded in OCR text — blank beats invention
- Sanctions screening before auto-file
- Scoped Telegram access so strangers cannot chat the agent
- Credits and logs so spend and actions stay auditable
What “safe enough” looks like day to day
Juniors already draft; seniors send. AI should occupy the junior slot: faster first pass, same approval culture. If a vendor cannot show where the human clicks, assume the risk sits with you.