Start with a job, not a general assistant
A small business does not need to give an AI worker access to everything. A safer starting point is a narrow role with a clear purpose, defined inputs, and an explicit stopping point. The worker should know what it may do now, what requires approval, and what it must never do autonomously.
That boundary matters more than the job title. A receptionist can be useful without changing a customer record. An estimator can prepare a draft without committing a price. A follow-up manager can organize reminders without negotiating terms. An operations assistant can surface exceptions without changing business rules.
Four bounded roles
**Receptionist:** The AI can answer routine questions using approved company information, collect basic details, qualify an inquiry, and route a request. It should ask first before promising availability, making unusual commitments, or changing a customer’s record. It should never approve refunds, make contractual commitments, or represent an unapproved policy as fact.
**Estimator:** The AI can organize project information, identify missing inputs, apply approved estimating rules, and prepare a draft estimate for review. It should ask first before using an exception, departing from a pricing rule, or sending an estimate externally. It should never authorize a final price, change margin rules, or accept a job on the company’s behalf.
**Follow-up manager:** The AI can track open conversations, suggest next steps, draft messages, and place approved reminders in a queue. It should ask first before sending sensitive or unusual messages, changing a commitment, or escalating a customer dispute. It should never threaten, negotiate a settlement, or close a matter without the authority to do so.
**Operations assistant:** The AI can summarize work, identify missing information, prepare checklists, and flag items that may need attention. It should ask first before changing schedules, assigning responsibility, or altering a process. It should never approve spending, override a safety or compliance rule, or make a decision reserved for the owner.
Make the boundary operational
Write each role as three lists: **do_now**, **ask_first**, and **never_autonomous**. Test it in Shadow Mode before allowing action. Then use Project Mode or an Autopilot Queue for controlled execution, with an Outcome Loop to review what happened and improve the instructions.
xYz provides a Business Brain for company-level context and evidence, plus a machine-readable Business Passport and Agent Gateway. Its Authority Map separates do_now, ask_first, and never_autonomous actions. For businesses considering a first estimating workflow, xYz can help analyze whether a narrow, supervised AI Estimator fits the work. Explore your business at https://aibyxyz.com/.