- The agent contacts a member without valid consent or ignores an opt out
- Store consent source and timestamp, check suppression before every send, process opt outs immediately, and follow applicable messaging rules.
- Retries or concurrent requests create duplicate messages, groups, or reservations
- Use idempotency keys, record state transitions, lock reservation writes, and make each tool safe to retry.
- A phone number is matched to the wrong member or reveals another member's information
- Verify identity at the appropriate risk level, disclose the minimum data, and require confirmation before sensitive changes.
- The agent calls a powerful Airtable tool with invented or incomplete arguments
- Use narrow validated tools, allow lists, dry run responses, and server side checks rather than relying on prompt instructions alone.
- One service fails after outreach begins and participants receive conflicting messages
- Persist workflow state, surface failures to an operator, compensate or cancel clearly, and send a consistent status update.