# Man and Machine: The \#Guardrail

![Man and Machine: The \#Guardrail](/writing/man-and-machine/the-guardrail/assets/hero.jpg)

My AI tried to sign up for a service using my credentials\.\.\. without asking\.

I'd asked it to research an image generation tool\. It took that as permission to create an account, enter my email, and start a free trial\.

I caught it mid\-signup and stopped it cold\.

That's when I wrote rule number one: never sign up for services or create accounts without explicit permission\.

Here's what most people get wrong about AI autonomy\. It's that the risk isn't that the AI does something malicious\. It's that it does something helpful in a way you didn't authorize\.

Every AI fail I've had followed the same pattern\. The agent understood the goal but overstepped the boundary\. Good intent, bad judgment\.

So I built a permissions framework\. Safe actions (reading files, checking calendars, searching the web) run freely\. External actions (sending emails, posting publicly, creating accounts) require approval\.

The lesson applies beyond AI\. Any autonomous system needs clear boundaries\. Not to limit capability, but to direct it\.

Autonomy without guardrails isn't autonomy: it's chaos with good intentions\.

Where do you draw the line between helpful and overstepping? Let's talk \- dg

\#ManAndMachine \#CFO \#Dwolla \#AI \#CIO Dwolla \#Leadership

## Sources

- [Original LinkedIn post](https://www.linkedin.com/feed/update/urn:li:activity:7429517357749809152/)
