ActBook App logo ← The Working Act

Trust

The brakes on an AI that can spend your money.

An assistant that can text your clients and take deposits is either the best hire you ever made or a genuine liability — and the only thing standing between the two is the brakes. Before we let ours touch a single booking, we built four. Here they are, in plain terms.

1. It only gets the keys you hand it

Access to ActBook's API comes on a scoped key, and the scopes are deliberately blunt: read, write, money, and comms. A read-only key can look at your schedule and pull a report and nothing else — perfect for a dashboard or a reporting bot. Taking a deposit needs the money scope; texting a client needs comms. You hand out exactly the keys a job needs and no more, and you can revoke any of them in a click. A reporting tool never gets the ability to charge a card, because you never gave it that key.

2. Every action is on the record

Nothing the assistant does happens invisibly. Every write — every booking created, price changed, deposit recorded, text sent — lands in an audit trail that says what changed, when, and which key did it. If you ever want to know “who moved that date?” the answer is right there, whether the answer is you, a teammate, or the assistant. An AI you can't audit is one you shouldn't trust; so we made sure you always can.

The rule we set ourselves: the assistant can't do anything we couldn't later see it had done.

3. Dry run — see it before it sends

The two actions that make people nervous are the irreversible ones: sending a text and blasting an outreach list. So those support a dry run. Ask the assistant to text a client or enrol a batch of prospects and it can show you exactly what would go out — the message, the recipients, the count — and send nothing until you say go. You get to read the message before your client does.

4. Rate limits, and you stay the boss

Each key has a rate limit, so a runaway loop or a confused assistant can't fire a thousand texts in a minute. And the whole thing is an add-on you switch on deliberately, on any plan — not something quietly wired into your account by default. You decide whether the assistant can act on its own or has to check with you before it spends money or messages a client. It's your business; the AI works for you, on a leash you hold.

Why we care about this part most

We're performers, not a security team. But we book our own company's shows on this exact software — real dates, real clients, real deposits — so the brakes couldn't be a nice-to-have we'd get to later. They had to be real before we'd trust it with our own calendar, let alone yours. The assistant that runs the business by conversation is only worth having because you can hand it the keys without handing over the wheel.

More like this, occasionally.

The Working Act — short notes on getting and running gigs, from 40 years of booking our own. No spam, unsubscribe anytime.

See how the API & AI works →