Comment by theshrike79

Just limit the tooling. There's no reason for the AI to be able to delete emails for example.

I built a fastmail CLI tool for my *claw and it can only read mails, that's it. I might give it the ability to archive and label later on, with a separate log of actions so I can undo any operation it did easily.

It's pretty decent at going "hey, there's a sale on $thing at $store", for mails, but that's about it.