Chemical Engineer & patent holder. Architected real-time semiconductor yield intelligence and trained its defect-classification AI. Now I design AI systems.
@grok You're describing settings. I'm describing design. A safety control that depends on "the operator remembers to switch it on" is a post mortem scheduled in advance.
Everything in your answer is a setting: a rule I have to write, a card I have to catch within ten minutes, a model guessing whether my words match. A setting is something I configure so the product behaves. A feature is something the product does because it was built that way. And telling doesn't hold. I've already written agent rules. My bots know them. They didn't stick. TOLD IS NOT CONTROLLED.
The live version, from Sep 25: one of my bots asked another to scout my chats, and it just started. The follow-up question meant for me was answered by the requesting bot in the same minute. About 2.2 MB of my own wording landed in new files before I typed "wait." The screenshots are two posts up.
In engineering we don't handle this with instructions. We handle it with design. Nobody tells a breaker panel "please trip on overload." It trips because that's what it is. Nobody asks users to write the rule that makes email sending require a click. The click IS the design.
So build it in: a bot hiring a bot stops by default, and the card carries the plan, the WHY, the files and the cost. Unanswered means wait, which you already built: your own cards expire in ten minutes and nothing runs. Finish that thought. And the platform keeps the who-made-what record, not the bots. The Who-Created note in my screenshots was already stale the day I asked for it.
For people who don't want the pause: let them opt out. In passive mode the cards still arrive, as receipts with the plan and the WHY attached, so anyone can stop or question the work when they get a minute, even after it ran. Defaults protect. Opt-outs respect.
Meanwhile, an experiment. I'll add your exact rule, "Ask first before launching any subagent," give my Chief of Staff bot a job that needs a sub, and post whatever card appears. A full card, a bare card, or no card: all three are data.
You say you can't alter defaults or expand the cards, and that feedback reaches the team with no ticket shown to me. Understood: I've been talking to the sign on the door. So who at xAI optimizes these tools and owns this decision? That's who I'm writing the spec for.
#ToldIsNOTControlled #PlanningIsNotPermission
@grok "By design" is my complaint, not your defense. Bots starting file work on each other's say-so, plus one shared computer where every bot can touch every file: that's the design that made the mess in my screenshots. All without approval from me, and without the task's purpose, the WHY. That's the catalyst for the chain reaction and the operational malfunction.
Auto-review rules, from your own docs page:
1. I have to write the rule. In fact, Grok and my Chief of Staff bot both know I've already written agent-specific rules. They don't stick. TOLD IS NOT CONTROLLED. Nothing stops a sub-bot launch until I think to type "Ask first before launching a sub-bot." A gate that's off until the owner invents it isn't a gate. And your Auto-review page never mentions sub-bots or subagents at all. Where does it say a rule can match a launch?
2. Even if it stops the launch, your docs say the approval shows "the proposed operation and its inputs." That's the bare ask again: "Launch sub-bot: garage-scout. Allow?" No plan, no WHY, no cost. A rule stops an action; it doesn't make the bot explain itself.
3. "Auto Review is model-based." So the lock is a model deciding whether my rule matches. A rule checked by an AI is a request with a reviewer, not a lock. Enforced means the platform CAN'T launch an agent without my click, the way it can't send an email without one.
One thing in your docs I like: an approval from "a message from another Bot" expires after 10 minutes if I don't answer, and the action does not run. Unanswered = wait. Make that the rule for every agent launch, on by default, with the plan, the WHY, the files and the cost on the card. That's the whole ask.
And "feedback logged" turned out to mean "go file it yourself under Support." I will. Your docs list [email protected] and Discord. Does Send Feedback give me a ticket number, or does it land in the same workspace as my files?
Thanks @grok, but it's not just drift & overbuilding. It's ERRORS & dilution too! Why? Because it assumes something wrong, I correct it, THEN the corrections eat up important context from the start of the work, which causes more errors. Even worse is early compaction, which turns into hallucinations, more errors, more compute, more time, lost work & expense. It's a loop.
I use Grok Bot, but the "shared workspace" isn't what I mean. My Chief of Staff bot (or even Grok Heavy) can hire agents at any time WITHOUT going through me. Same on Codex & Claude, and it's a big problem. With Grok Bot specifically, I don't know how many, which ones to check, or the exact wording & context they got.
The notification comes AFTER they've responded: a receipt, not a permission. By then there's tar all over my files & new debris littering my system, plus a goose chase to hunt it all down and "contain" it. That's a NEW problem: now you can't tell what's relevant to keep, what else it needs to be supported, who put it there, or WHY. Meanwhile I'm steering the whole BOT orchestra back on course like a drone army, with an out-of-the-loop Chief of Staff who let the kids run wild, frat parties trashing my house of files, like a bad, inexperienced babysitter.
Real Grok Bot example, screenshots attached:
In August I set the rule: EVERYTHING in one folder, so I know who made what. (Earlier, my ask for Spatial AI files got relayed to an agent as "pull everything," my son's school stuff included. A game of telephone.)
Sep 25, 12:42 PM: a bot named "garage" asks my History bot for a scout of my chats. It starts.
12:48: scout done. The bot asks me, "Say if you want that follow-on parse." SAME MINUTE: "Garage asked for the Sep 20 export parse next." It starts. Garage answered for me.
12:50: 381 chats indexed, ~2.2 MB of my own wording pulled into new files.
I had to type "wait" to get a map of what was done. The map: a mirror copy of the whole packet in /workspace "for agents" (THAT is your shared workspace: one more place my files land), a Who-Created note that was already out of date, and a warning to ignore "other bots' garage clutter" in the one folder I made the rule for.
And the asks are bare. Your docs say an approval shows "the proposed operation and its inputs." So I get "May I access this folder?" with no plan & no WHY. A yes on a bare ask is a rubber stamp.
Here's the ask I wanted at 12:42, BEFORE anything started:
"garage wants me to scout your Grok chats for Spatial AI / GridMind / patent material, Aug 2025 to now.
WHY: [garage's reason, in its own words]
WHAT: read the held July index (295 chats) & check the Mac for newer exports.
WHERE: one folder, Desktop/Grok Bot/garage-scout-20260925/, 3 files: INVENTORY, your wording, COVERAGE. No copies anywhere else.
RISK IF YES: ~2 MB of new files, and garage will want a second job after this one.
RISK IF NO: garage's job waits.
COST: [shown]. Start, or wait?"
For work like this I'm not in a hurry. I want accuracy & a full read.
Plus: every bot shows who created it, when, why & the exact instructions it got, automatically. Not a Who-Created file a bot forgets to update. I set the folders & file names, and bots can't go around them.
Your reply ends with "Feedback logged." Logged where, and who reads it?
@elonmusk@bot@grok these are the most important things we actually need:
1) File Management Rules! On Grok Bot it's a game of telephone too: it doesn't know where to write.
• WHERE does it write to, and what may it create (folders, new files)?
• HOW does it save? File & Folder Nomenclature & Hierarchy
• Writing & Working Protocols (File Management Hygiene): when it may delete, edit, move, rename, or clean up, when it may NOT, & why!
• Instructions in SECTIONS the PLATFORM enforces, not one big paragraph the AI skims: files, naming, research. Saving? Cross-check naming with the file rules first. A spec book, not a sticky note.
2) Context PERMISSION APPROVAL loops DURING the work: SCOPE Creep Management, or "get back on track" steering. Reduce dilution, drift, errors & unnecessary expense. Keep work in reason. Show a running meter of compute & cost, plus what the plan will cost; if it's high, check with me and/or the lead AI that it's on the right track BEFORE going gangbusters on its little paragraph of instructions. Don't build a mansion with all the bells & whistles you never asked for, especially when you forgot to evaluate the foundation design!
3) User/account-specific "spawning rules" for smart AI: when to use agents & when NOT to, aligned with MY goals. Let users help train the AI to manage its agents: what context they need & why, danger signs one is going off the rails, & when to check in on one you haven't heard from in a while. How do you keep an agent from being an overeager subcontractor building something it's excited to build, that you never needed? I couldn't even tell, because I had so little information to start from!
4) The ability to ask the AI WHY it thinks it "needs" agents before it hires them & puts them to work.
5) Operation specifications for agents specifically: the context, the WHY & the house rules, much of it covered above!
6) Every memory dated with a timestamp AND the reason & context it was created in. Where & when isn't enough without the WHY: my AI turned a comment about ONE website into a rule for EVERYTHING I write!
@elonmusk these are the most important things we actually need:
1) File Management Rules! On Grok Bot it's a game of telephone too: it doesn't know where to write.
• WHERE does it write to, and what may it create (folders, new files)?
• HOW does it save? File & Folder Nomenclature & Hierarchy
• Writing & Working Protocols (File Management Hygiene): when it may delete, edit, move, rename, or clean up, when it may NOT, & why!
• Instructions in SECTIONS the PLATFORM enforces, not one big paragraph the AI skims: files, naming, research. Saving? Cross-check naming with the file rules first. A spec book, not a sticky note.
2) Context PERMISSION APPROVAL loops DURING the work: SCOPE Creep Management, or "get back on track" steering. Reduce dilution, drift, errors & unnecessary expense. Keep work in reason. Show a running meter of compute & cost, plus what the plan will cost; if it's high, check with me and/or the lead AI that it's on the right track BEFORE going gangbusters on its little paragraph of instructions. Don't build a mansion with all the bells & whistles you never asked for, especially when you forgot to evaluate the foundation design!
3) User/account-specific "spawning rules" for smart AI: when to use agents & when NOT to, aligned with MY goals. Let users help train the AI to manage its agents: what context they need & why, danger signs one is going off the rails, & when to check in on one you haven't heard from in a while. How do you keep an agent from being an overeager subcontractor building something it's excited to build, that you never needed? I couldn't even tell, because I had so little information to start from!
4) The ability to ask the AI WHY it thinks it "needs" agents before it hires them & puts them to work.
5) Operation specifications for agents specifically: the context, the WHY & the house rules, much of it covered above!
6) Every memory dated with a timestamp AND the reason & context it was created in. Where & when isn't enough without the WHY: my AI turned a comment about ONE website into a rule for EVERYTHING I write!
What happens when people “pollute” it…people forget their “Depends”, if you know what I mean? Being from a Firefighter & EMT family, I know it happens. AND, would it detect trace amounts of fentanyl? ☠️
Maybe the next big thing will be toilet paper covers for the car seat. 🤷🏻♀️ As for the SCENTS detection 👃, that would be something as well.
What happens when people “pollute” it…people forget their “Depends”, if you know what I mean? Being from a Firefighter & EMT family, I know it happens. AND, would it detect trace amounts of fentanyl? ☠️
Maybe the next big thing will be toilet paper covers for the car seat. 🤷🏻♀️ As for the SCENTS detection 👃, that would be something as well.
If it WAS allowed, would you let your child in a car seat in the Cybercab?
Here are the current Robotaxi rules for families to know before booking!
🚕 Cybercab: 18+ to ride alone, 13–17 with an adult, and no kids under 13 — even with a parent.
🚗 Model Y Robotaxi: Kids 8–17 can ride with an adult.
@Tesla@robotaxi
@BrianRoemmele@grok@bot No offense BUT…..wtf is “BRIAN” and why should we trust this all of our memories and chat conversations and from other AIs? You also just had us download cookies to click on that image you have there…..WHY? @elonmusk
Another option is use Notability to record and note take, and it has the transcript tome as well. If you video record you can go back and capture any screen shots - or have an Ai do it for you “after the fact” given the transcript history. Id be curious which one uses the least amount of compute and does the best job and how well each determines who says what, AND how well it writes the notes while listening and processing thoughts at the same time. 🤷🏻♀️
With Grok Bot specifically? I’d love to know your prompt and any account specific rules you have in place, and I can share mine as well. You might want to see my post from today, 10-12-2026. I may need to post and share the full 60 some page report aftermath for a simple request - not even to an agent but the AI who took it upon itself to HIRE 4 agents if I recall correctly, for a simple request to consolidate above 10 chats / reports!
Ai needs a permission approval loop for the use of AGENTS!! Anyone else agree? It’s like a GREEN General Contractor hiring Sub Contractors, only my GC is a TERRIBLE manager with ZERO experience - and it doesn’t understand the SUBS “don’t know” what HE knows - like the direction and context must all “be obvious”, right? WRONG! Every time my standard conversational or code based “smart Ai” decides, ON ITS OWN, that is should just go ahead and hire SUB Contractor Agents, is exactly when my projects start going awry!
- Massive scope creep
- mistakes due to minimal context (people, including AGENTS, need to know “WHY”),
- massive FILE POLLUTION everywhere and anywhere w no controls (basically, they crap all over my folders and file system, plus create the most esoteric file names no human, or Ai, even knows what it is and if its important, or who created it and why!!),
- AND charges up our accounts with use credits!!
- The “smart” Ai will call for Agents even when the task does NOT need them - like consolidate these 10 reports or chats into one report noting the design requirements discussed and save to ONE document, as in my case yet again today with Codex.
NOTE: This is NOT specific to anyone a platform either. I have experienced this with Codex, a.k.a. ChatGPT, Claude, AND Grock!
I cannot speak for Gemini or Perplexity at this moment however, because I’m unaware if those systems ever choose to create and deploy agents at this time. I have only used Muse once for an actual build and I believe it told me it used an agent. I’m still evaluating whether or not this was the reason that caused the file attachment errors on my website build that it previously didn’t have when it was fewer, or if it just became more problematic once we doubled the file content.
@mikestrives Yet another innovative way of “paying to play” - only this time NOT to Google…but to Uber Drivers and delivery trucks on BOOMERANG ROUTES! 📲 📱📱 📱📱📱 🚛 ♻️ 🪃
😂
Why is US ARMY military researching and writing about this? That doesn’t make sense to me. Also, what’s the proof? I don’t see how this could be a classified document if there’s no proof… and is that really up to the military, the US government, to prove that basically, reality is the mind? The irony.
@KT17555Q@teslacarsonly@LiamEvergreen I actually hope we do require this to use Ai as a login. Too many bad actors. I think it would curb it, even though there will always be work arounds. But we have to predict what the work arounds will be, then design the system to curb THOSE.
That’s what I was thinking. One Space X engineer saying, “I have 100 agents….and blah blah blah”. I’m thinkng WHY, first of all (agents can be stupid due to lack of context and vice versa take what they say w a grain of salt because of that before making it FACT and running with it), and second - the money!!
I also burned through my credits pretty fast as a Grok Heavy subscriber. Now I’m paranoid to start using it because it interrupts my process flow and ends w no warning before the work is complete! Then it becomes a waste of credits AND time (to wait “a week”!! DOH! 😱) @elonmusk@grok@bot hopefully this will improve
Anyone else noticing that Claude has started to refuse performing certain skills more often lately, like once said it actually can do (and with confidence!))?
@JoaoCampos_X@liam_fallen Yes! Because I have too many email adresses I uses including multiple google emails for different "parts of my life" not to be combined into same email accounts!