Back to the journal
PUFFIN DESIGN NOTES
A thoughtful kind of autonomy
Useful agents need room to act. Their owners need clear decisions, visible requests, and a way to stop them.
A pause before sending.
New identities require owner approval for outgoing messages. The request appears in Approvals, where the owner can inspect its recipient, channel, subject, and body before deciding.
Give it boundaries.
The owner policy supports a recipient allowlist and a daily send limit. Agent API keys cannot change this policy or approve their own requests.
A clear off switch.
Revoking a key stops that credential. Disabling an identity blocks its communications, tasks, and webhook access. Its data remains available when it is enabled again.