Every "AI agent" demo shows a voice command turning into a sent email like magic, but almost nobody shows the part that actually matters: what stops it from sending the wrong thing. I built proof: an agent that runs your Gmail, Calendar, Contacts, and Drive by voice reply to a thread, schedule a meeting, archive an email, find a file hands-free end to end, but never fires anything irreversible without you saying so. The honest hard part isn't getting an LLM to sound smart, it's this: a transcript goes to LLM against a strict JSON schema and comes back as an ordered plan, every step tagged reversible or not and exactly one thing in the whole system is allowed to check that flag. Finding a thread, drafting a reply, creating a calendar event: those just run.