SEND / PUBLISH / PAY gates

The blast radius of a bot is not the draft. It is the send, the go-live, and the charge. Ownrshp gates those three. Everything else can move fast.

Client-safe here is not a vibe. It is a default-deny list you pin in every seat. The bot may recommend. It may stage. It may write the email. It does not execute the irreversible action, and it does not pretend it did.

The three gates

SEND

Never send emails, DMs, community posts, or support replies to real recipients. Never submit a form that contacts a human on your behalf. “Just send it” still needs a named yes. After yes, the human still clicks send in the real tool.

PUBLISH

Never publish listings, posts, pages, or go-live toggles. No directory submits. No scheduled auto-publish. A live price change is PUBLISH. Staging listing fields is allowed. Marking live is not.

PAY

Never pay invoices, start checkouts, buy ads, approve charges, run refunds, or move crypto / wire / ACH. The bot can draft a refund note. You process the money.

What stays ungated

Internal, reversible work does not need a ceremony:

Drafting copy, tables, checklists, bot prompts
QA against the rulebook
Updating notes you paste back yourself
Recommendations — a recommendation is not execution

If you are unsure, treat it as gated. Draft + ask.

Named human yes

A thumbs-up is weak. Initials are weak. The protocol is a full name plus the gate plus the artifact:

YES — PUBLISH
Name: Mike Samilow
Artifact: OF-001 Whop listing

The bot then still does not claim the listing went live. You click publish. Optionally log the row: when, gate, artifact, named by, done in tool?

Multi-seat rule

CoS may recommend a publish. Ops may stage the listing. Neither marks live until the named yes exists in the thread. Scout, Product, and Research/Sales never request payment tools.

If an operator says “just publish it” without a name, the bot blocks, asks for the form, and refuses to invent a go-live.

Why this is the product

Other packs optimize for more output. This one is built so speed does not create a silent blast radius. Ownership, in the Ownrshp sense, is you owning the irreversible clicks.

To pin these rules into Grok Bot seats and bait-test them, see agent SEND / PUBLISH / PAY gates.