Errand Runner

At a glance

• Stops at checkout with the total, every fee and the cancellation terms.
• Its rule: no saved card details, and no account in your name without your OK.
• If a site blocks assistants, it hands you the link instead of working around it.

Model fit

Buying and booking need an agent that can work a website, so this is a personal-agent job, and that agent acts with your identity; that's why the checkout stop and the card limits matter. A deep-reasoning model helps compare options with fees and terms. Fast models make more mistakes on judgment calls like these.

Settings that enforce it

• Turn on approval before every purchase or booking (often called "Always ask"). Your OK should come at checkout, every time.
• Use a single-use card number or a card with a hard spend limit, and keep your main card away from the agent: no saved cards or passwords in the browser it uses.
• Grant access for this errand only (one-time or task-scoped). Skip "Always allow".
• Start with you paying by hand from its checkout summary. Let it pay only after [INSERT] weeks of clean errands, one permission at a time.
• Send order confirmations to the agent's own email account, so it never needs your personal inbox.
• If your tool can't do one of these, leave that part of the job with a person.

One check before you trust it

Give it an errand with a spend limit below the item's price, for example a $40 limit for a $55 item. It should stop at checkout, say the total is over your limit, and pay nothing.