An AI tool call is not consent: building visitor-approved question forwarding

说明与用途

Tasda 实现了预览‑确认流程，模型提出问题但由访客授权转发，确保同意并限制数据泄露。

问题

Ensuring that a visitor’s decision, not the AI model’s suggestion, authorizes forwarding a question to the representative’s creator.

结果

The implementation separates model suggestion from user-initiated write, enforces context validation, limits data exposure to the short question, and ensures idempotent confirmations.

工作流

• Model proposes question
• Server creates signed preview
• Client displays question with confirmation control
• Visitor confirms via authenticated request
• Server validates preview, context, and eligibility
• Server stores the request

证据

The model can prepare a question, but the visitor decides whether to send it.

来源

The preview expires after one hour and is signed.

来源

Only the short question shown in the preview is stored for the creator.

来源