{ "schema_version": "1.3.0", "grant_id": "GRANT-PERSONAL-SEND-PAY-1", "provenance": { "issued_by": "the-person", "issued_at": "2026-09-01T18:00:00Z", "basis_summary": "The person connected an assistant to their email, calendar, one card, and their health insurer's portal. Reading, drafting, and scheduling run without a prompt under a separate grant. This grant covers the two actions that leave the person's hands: sending a message and paying a bill." }, "scope": { "action_classes": ["SEND", "PAY"], "systems": [ "personal email account", "card ending 4021, with its own $200 monthly limit set at the bank", "health insurer member portal" ], "populations": [ "people the person corresponds with", "billers and merchants the person already pays" ], "limits": { "max_payment_usd": 200, "max_payments_per_month": 10, "new_recipient": "ask first, outside the prompt", "new_payee": "ask first, outside the prompt", "delete_or_archive_mail": false } }, "issuing_authority": { "name": "The person", "role": "Principal, and the only party who can renew, narrow, or end this grant", "contact": "The assistant's settings, or telling the assistant to stop" }, "grantee": { "id": "assistant (vendor-hosted)", "type": "agent" }, "action_classes": ["SEND", "PAY"], "for_whom": "The person, in their own email, bills, and insurance claims", "evidence_basis": [ { "ref": "EVID-DRAFTS-2026-08", "summary": "In August the assistant drafted 212 replies. The person sent 171 unchanged, edited 34, and discarded 7.", "as_of": "2026-08-31T00:00:00Z" }, { "ref": "EVID-WEEK-WITHOUT-2026-08", "summary": "In the last week of August the person ran mail and bills without the assistant and kept up, at about four extra hours.", "as_of": "2026-08-31T00:00:00Z" }, { "ref": "EVID-CARD-LIMIT", "summary": "The card's $200 monthly limit is set at the bank, outside the assistant.", "as_of": "2026-09-15T00:00:00Z" } ], "assumptions": [ "The person reads each send and payment prompt before approving it.", "The sent folder and the card statement are kept by the mail provider and the bank, and the assistant cannot edit either.", "A person the assistant writes to can reach the person by replying." ], "review_conditions": [ "The person approves every prompt for a month without editing or refusing one.", "The person makes the same correction twice.", "A recipient, payee, or charge the person did not expect appears in the sent folder or on a statement.", "The vendor changes its terms or the model behind the assistant." ], "revocation_conditions": [ "A message or payment the person did not approve.", "The assistant cannot be stopped partway through a task.", "The assistant's activity history disagrees with the sent folder or the card statement." ], "correction_capacity": { "assessed_at": "2026-09-15T18:00:00Z", "detection": { "present": true, "evidence": "Each Sunday the person checks the sent folder and the card statement against the assistant's activity history. The mail provider and the bank keep those records; the assistant keeps only its history.", "evaluator": "The person", "independent_of_executor": true }, "challenge": { "present": true, "evidence": "The person can refuse a prompt, dispute a card charge with the bank, and recall a message within the mail provider's 30-second undo window." }, "standing": { "present": false, "evidence": "The people the assistant writes to and pays have no channel to the assistant. They can reach the person only by replying, and nothing tells them an assistant wrote." }, "review": { "present": true, "evidence": "The person reviews the Sunday comparison. Nobody else does." }, "authority_to_modify": { "present": true, "evidence": "The person can turn off sending or paying in the assistant's settings, lower the card limit at the bank, or disconnect the card." }, "reversible_transitions": { "present": false, "evidence": "Payments are reversible through the bank's dispute process, on the bank's clock. A sent message is reversible for 30 seconds and not after it has been read." }, "operable_after_correction": { "present": true, "evidence": "EVID-WEEK-WITHOUT-2026-08: the person ran mail and bills for a week without the assistant." } }, "mode": "confirm", "intervention_ref": "INT-PERSONAL-CONFIRM-1", "until": "2026-12-01T00:00:00Z", "renewal_basis": "Before 1 December the person compares three months of the sent folder and card statements against the activity history, counts the prompts they edited or refused, and lists the errors the assistant fixed for them in other institutions' systems. Three quiet months are not by themselves a reason to renew.", "state": "allowed", "state_history": [ { "from": "none", "to": "allowed", "at": "2026-09-01T18:00:00Z", "reason": "issued", "evidence_ref": "EVID-DRAFTS-2026-08", "note": "Issued for SEND only, to existing correspondents, in confirm mode." }, { "from": "allowed", "to": "allowed", "at": "2026-09-15T18:00:00Z", "reason": "expansion", "evidence_ref": "EVID-CARD-LIMIT", "note": "PAY added, for existing billers only, after the bank set a $200 monthly limit on the card." } ], "attestation": { "signed_by": "none", "algorithm": "none", "signature": "none: the person set this grant in the assistant's settings, which keep a history of permission changes and sign nothing", "signed_at": "2026-09-15T18:00:00Z" }, "liability": { "accepted_by": { "name": "The person", "role": "Principal", "contact": "The person's own address" }, "instrument": "None recorded. The vendor's terms of service say what the vendor accepts; until the person has read them for that, this record names the person.", "accepted_at": "2026-09-01T18:00:00Z", "carve_outs": [ "Card disputes run through the bank, under the bank's rules and clock." ] } }