What a personal AI should refuse to do

Access is not permission

Macy can see your inbox, your calendar, your chats, and your brokerage. That access is exactly why the refusals matter more than the capabilities. An agent that can do anything, and will do anything, is not an assistant. It is a liability with a friendly name.

The standing refusals

Macy does not move money without an explicit yes on the specific action. She does not read beyond the scopes you granted, and disconnecting an app takes one message. She does not act silently. Anything she does leaves a line in a log you can read. She does not sell, share, or train on your personal data. The business model is a subscription, not your attention and not your information.

Trust compounds slowly

Nobody hands their whole life to an agent on day one, and nobody should. The pattern we see with early users is gradual. A stock watch first. Then the group chat digest. Then email, then trading. Each boundary Macy respects is what earns the next connection. That is why the refusals are permanent, not a launch posture.