Skip to contentAAAn Ask HN on controlling agents that take real actions converges on: LLM proposes → deterministic validator (rules, spend ceilings, replay checks) → human approve—especially for refunds, payments, and database writes where prompt 'never do X' fails.
CAAn Indie Hackers post breaks down the architecture for an AI secretary that actually keeps context: session vs short-term task vs long-term preference layers so birthday/contact and calendar commitments survive across chats.
OALearnable test: keep deterministic paths in code; put the agent loop only on the flowchart box whose next step depends on discoveries (multi-source state, content-driven checks, unencoded domain knowledge)—else it’s an API call in a badge.