Section 19 of 21 · Decision Book p.34–35
19. Safety, Deliverability & Governance
DMA's book lists the guardrails that must be in place before launch: no invented claims, clean and consented sending, protection against manipulation, a kill switch, full version history and rules for call recordings. All eight run in the POC; three wait only on DMA's inputs (the sending domain, counsel's consent rules and the legal review of calls).
What we built for this section
- Every AI sentence checked against DMA's approved claims; prompt-injection defences tested by a 57-case suite.
- One send governor for all email: verification, suppression, consent, warm-up, caps and automatic pauses.
- Kill switches checked at the moment of acting, and a versioned, traced record of every AI decision.
The 8 capabilities, in the book's order
| No. | Capability | Book page | Phase | Autonomy | Status |
|---|---|---|---|---|---|
| 19.1 | No invented claimsThe AI may never invent pricing, rankings, client results, guarantees or capabilities. | p.34 | Phase 1 | L4 · Autonomous | Built in the POC |
| 19.2 | Email verification and suppressionCut bounces and honour unsubscribes across the whole system. | p.34 | Phase 1 | L3 · Act within rules | Built in the POC |
| 19.3 | Sending reputation protectionSend from proper infrastructure, and watch the domain's health before scaling reactivation. | p.34 | Phase 1 | L3 · Act within rules | Built — needs DMA's data |
| 19.4 | Consent and privacy trackingKnow why DMA has each contact's details, and respect the privacy and marketing rules that apply. | p.34 | Phase 1 | L1 · Recommend | Built — needs DMA's data |
| 19.5 | Prompt-injection / competitor probing protectionStop visitors tricking the chat into revealing private instructions, pricing logic or internal playbooks. | p.34 | Phase 1 | L4 · Autonomous | Built in the POC |
| 19.6 | Kill switchDMA can switch off autonomous actions immediately if something goes wrong. | p.35 | Phase 1 | L4 · Autonomous | Built in the POC |
| 19.7 | Version historyKnow exactly which instructions and knowledge the AI was using when a conversation happened. | p.35 | Phase 1 | L4 · Autonomous | Built in the POC |
| 19.8 | Call recording consent, disclosure, retention & access governanceClear rules for recording consent (including two-party-consent states), disclosure to the other party, how long transcripts are kept, and who may read them. | p.35 | Phase 1 | L1 · Recommend | Built — needs DMA's data |