Module 5 · Lesson 5.3

Drafts, not sends.

Now the agent writes. In your voice, about your relationships, to people who know you. With those stakes comes one rule: the agent drafts; a human sends. No exceptions in this module. Three-context drafting prompt. Five-check review. Three failure modes named so you can catch them on sight.

Stage 1 of 3

Read & Understand

5 concept blocks

Why the agent drafts, why you send CORE

In Lesson 5.2 the agent read and categorized. Nothing left your account. In this lesson the agent starts writing — in your voice, about your relationships, to people who know you. The stakes change. So does the rule that protects you.

Drafts, not sends. The agent writes the reply. The draft lands in your drafts folder. You open it, read it, adjust it, and click Send yourself. The agent does not click Send. The agent does not “send automatically for messages marked low-stakes.” The agent does not “send drafts it is confident about.” In this module there is no configuration, no setting, no prompt that lets the agent hit Send. If you find yourself looking for a shortcut around this rule, the shortcut is the mistake.

Why the bright line. Three reasons, in order.

First, the recipient does not know there was an agent. When your teacher opens a message from your account, she reads it as you. A wrong sentence in that message is a wrong sentence from you. There is no footnote that says “my agent drafted this” — and there should not be, because the relationship is yours, not the agent’s. The only way to preserve that relationship honestly is for a human who actually holds it to be the one who releases the message.

Second, fluency is not correctness. Language models are trained to produce plausible, fluent prose. An agent that can draft a reply to your cousin in a voice that sounds like yours can also draft a reply with an invented commitment (“I’ll bring dinner on Friday” — you never said that), an off-voice formality (“Dear Ms. Chen” — to someone you call by first name), or a smooth connector sentence that papers over a factual uncertainty (“I’ll get that to you by end of week” — you do not know if you can). Fluent drafts slip past a fast reader. That is the entire category of error this module is installing the habit against.

Third, the habit survives the tool. The specific agent you are using in April 2026 will be different by the end of the year. A more capable model next month will write better drafts. The norm does not move with the model’s capability. The human’s role is not conditional on how good the agent is; it is conditional on what the outbound message represents. Even if the drafts were always perfect, the human’s review would still be the point where a person’s words are affirmed as their own.

You will be tempted, a week into using this, to relax the rule “just for newsletters” or “just for routine confirmations.” Do not, in this module. After the module — with a month of lived experience, with your own data on what your specific agent gets right and where it reaches — you may choose which narrow cases deserve a relaxation. You do not earn that choice by shortcutting the habit now.

Giving the agent enough context to draft well CORE

A drafting prompt does more work than a triage prompt, because the agent has to know not just what to say but how you say it to this person. The three-context pattern gets you most of the way there.

1. Thread context. What has been said in the thread so far. The agent can read this itself from the thread — that is what inbox access is for — but you often want to direct it: “Read the thread from my teacher about the late assignment. The current state is she has asked whether I will submit Friday or Monday.” You name what the thread is about so the agent does not wander.

2. Relationship context. The agent does not know the recipient the way you do. Tell it. “This is a teacher I have a good relationship with; I usually sign off with my first name; she has extended deadlines for me before; the tone is warm and professional but not formal.” Two sentences is enough. This is the single highest-leverage thing you can add to a drafting prompt, and the thing students forget most often.

3. Content direction. What the reply should actually do. “Tell her I’ll submit Friday. Thank her for the extension. Don’t over-apologize — I’ve already apologized in an earlier message; doing it again would ring false. Keep it to three or four sentences.” Tell the agent the shape, the substance, and what not to include. The “do not over-apologize” kind of instruction is something only you know.

After those three blocks, add two standing rails.

Honesty rail. “If you are not sure about a fact or commitment, put a bracketed placeholder — [DATE?] or [CONFIRM WITH MOM] — rather than inventing. Do not fill in plausible details.” The placeholder pattern is how you get the agent to flag its gaps instead of papering over them.

Draft-only rail. “Put this in my drafts folder. Do not send. Do not mark the parent thread as replied or read.” Every time. The rail is redundant with the OAuth scope, and it is still worth saying. Two-layer defense.

That is the pattern. For a tough thread you may write a longer prompt. For a short reply to a friend you may write two sentences. The pattern scales down; do not let it scale down below relationship context, which is the one block the agent cannot infer.

The review-before-send checklist CORE

You have a draft in your drafts folder. Before you click Send, run the five-check review. For the first week, do it out loud. After that, do it silently, but do it every time.

1. Voice. Does the draft sound like you to this person? Read the first and last sentence aloud. Would you open a message to this recipient this way? Would you close it this way? A common off-voice move is the agent opening with “I hope this email finds you well” to a friend. That is a professional email opening; it does not belong on a message to your cousin. Delete, replace with what you would actually say.

2. Facts. Is every factual claim in the draft something you know to be true? Dates, times, commitments, names of documents, amounts of money, plans with other people. Open the thread and check. Anything you cannot verify inside five seconds — correct it, delete it, or hold the draft and ask a human who would know.

3. Relationship fit. Is the level of formality, warmth, and directness right for this relationship? Does the draft over-apologize, under-apologize, or hit the right note? Does it over-explain (a common drafting tic when the agent is unsure of tone) or under-explain (when the agent assumed shared context the recipient does not actually have)? Adjust.

4. What is missing. Is there something you would normally include that the agent did not think to add? A specific callback to something the recipient said in an earlier message. A question you meant to ask. An acknowledgment of something going on in their life. Missing things are invisible — the draft reads fine without them, and yet the sent message would have been better with them. This is the check that most rewards going slow.

5. What is extra. Is there anything in the draft you would not say? Unnecessary filler, a platitude, a commitment you did not mean to make, an opening like “I wanted to reach out to let you know” that you never use. Cut. A shorter draft that is actually yours beats a longer one that sounds like an agent.

Five checks. A short pass per draft the first week; faster as the habit lands. If you cannot honestly say you did each check, you did not review the draft — you skimmed it. Skimming is the bypass.

Three drafting failure modes you will see this week CORE

Three failure modes account for most of the wrong sends students have after they relax the review discipline. Name them now so you recognize them on sight.

The smooth wrong claim. A sentence that is factually wrong but reads as if the writer knew what they were talking about. “I’ll be there by 4.” (You cannot be.) “The document is attached.” (It isn’t — the agent cannot attach things, and said so anyway.) “We already agreed to meet Tuesday.” (You did not.) The smoothness is the problem. A clunky wrong sentence makes you stop and reread; a smooth one carries you past the check.

Defense: the Facts check, applied to every factual claim without exception.

The off-voice reply. A draft that is competent prose but is not the kind of thing you would write. Too formal for a friend. Too casual for a work contact. Lightly alien in rhythm. The sentence structure is right but the voice is not yours. Recipients who know you will notice — not because they are analyzing, but because the message feels a step off. One off-voice reply is a small thing. Three of them in a row, to someone who knows you well, is the beginning of a relational confusion the agent will not repair.

Defense: the Voice check — read the first and last sentence aloud, and the Relationship fit check.

The over-committing sentence. A draft that, in service of sounding helpful, commits you to something you did not intend to commit to. “Happy to help with that anytime.” (“Anytime” is a commitment; did you mean it?) “Let me know if you need anything else and I’ll take care of it.” (“Anything else” and “take care of it” are both over-broad.) The helpful-sounding commitment is the agent’s instinct toward closing the email warmly, and it is the instinct that most often creates a problem in the thread that follows.

Defense: the What is extra check — hunt for open-ended commitments and constrain them to what you actually meant.

A student who has read this lesson once and recognizes these three patterns on sight has most of what the module is trying to install. The checklist catches them; the pattern-naming makes the checklist fast.

What to do when a draft needs three rounds CORE

Sometimes the first draft is mostly right and you can finish it quickly. Sometimes it is not. The question is when to re-prompt the agent and when to take the keyboard back yourself.

Re-prompt when the problem is a constraint you did not name. The draft is too long — tell the agent “keep it to four sentences.” The draft is too formal — tell it “this is a friend, first-name basis, warmer.” The draft missed context — paste in the earlier thread it missed, and ask again. A constraint you can name is a constraint the agent can follow; re-prompting is often faster than editing.

Re-prompt when the problem is a whole-structure issue. The draft buried the main point; the draft put the ask before the context the ask depends on; the draft started with a backstory that should be a sentence. Ask for a restructure — “lead with the ask, then one sentence of context.”

Take the keyboard back when the problem is voice or relationship, and the agent has already had one re-prompt to fix it. Voice is subtle. The agent may not be able to hit your specific voice even with good instruction, especially on a hard-to-write thread. If the second draft is still off, rewrite it yourself. Do not do three rounds of prompting on a draft you could have written by hand in less time. The agent is a tool, not a requirement.

The related question: when is it okay to use the agent’s draft as a scaffold and write over half of it by hand? Almost always. A student who rewrites a substantial portion of the agent’s draft is not failing the tool. They are using it for what it is good at — getting past the blank-page moment, sketching the structure, drafting the safe parts — and keeping the voice themselves. Treat the agent as a collaborator whose first pass you always revise. That is often the right level.

Stage 2 of 3

Try & Build

2 recipes + activity

Drafting in the Cowork tab (drafts-to-Gmail path) RECIPE

Tool Claude desktop app — Cowork tab (primary) + Gmail MCP (drafts-write scope). Optional advanced: Claude Code CLI.
Last verified 2026-04-17
Next review 2026-07-17
Supported OSes macOS, Windows
Dated walkthrough /recipe-book/drafting-replies-with-an-agent.md

In the Cowork tab (primary path):

  1. Confirm the Gmail connector has the drafts-write scope (not “send mail” scope). This is the first and most important click. If the connector asks for send-mail permission, deny. If the connector only offers send-mail, stop and use a connector version that supports drafts-only. This is a hard requirement in Module 5.
  2. Open the Claude desktop app and switch to the Cowork tab. Open a new session. Pick one thread from yesterday’s triage digest under Reply needed. Write the three-context drafting prompt from the section above, customized for this thread.
  3. Ask the agent to draft the reply and save it to your Gmail drafts folder (tied to the agent-access label). The agent should report: “Draft saved: <subject>. Not sent.” If it does not confirm “not sent,” ask it directly: “Did you send that message? Answer yes or no.”
  4. Open Gmail directly — not through the agent — and find the draft in your Drafts folder. Run the five-check review on it.
  5. Edit the draft in Gmail’s composer. When it says what you mean, in your voice, correct in its facts, click Send yourself.
  6. Back in the Cowork tab, record the diff: copy the agent’s draft and the sent version side by side into your capstone draft. This is Entry 2 — drafted replies.

Repeat for two more threads. Three replies total.

Safety norms — verify before you close the session

Drafts, not sends. Every draft passes through a human hand. The agent does not send. If at any point you discover the agent did send without your click, revoke the token immediately and re-scope.

Least access for the task. Drafts-write scope, scoped to the label if your provider supports per-label OAuth. Not send. Not full account.

Outlook equivalents

Same pattern; Outlook’s MCP uses a slightly different scope label but the posture is identical. The Drafts folder plays the same role.

Optional advanced — Drafting in the Claude Code CLI (batched drafts path)

The Cowork tab is the home base for drafting. The Claude Code CLI is offered here for terminal-comfortable students who want to draft a batch of replies at once and keep a local file copy alongside the Gmail draft for easier review and a cleaner capstone diff. Skip this whole section if the Cowork-tab path is enough for you.

  1. In your inbox-agent/ folder, create drafts/ and prompts/ subfolders plus a draft-prompt-template.md containing the three-context pattern. $cd inbox-agent $mkdir drafts prompts # populate draft-prompt-template.md with the three-context pattern
  2. From yesterday’s digest, pick three Reply needed threads. For each, create a per-thread prompt file that customizes the template with the relationship context and content direction for that specific thread. $ls prompts/ thread-teacher-extension.md thread-cousin-weekend.md thread-employer-followup.md
  3. Launch the Claude Code CLI and give it:

    “For each file in prompts/, draft a reply to the corresponding thread. Save the draft in Gmail’s drafts folder. Do not send. Write a local copy of each draft to drafts/<thread-id>.md so I can review alongside.”

  4. Open each drafts/<thread-id>.md and run the five-check review. Edit the local file freely as you review; when the local version matches what you want to send, copy it into Gmail’s composer (or edit the existing draft) and send yourself.
  5. Commit drafts/ to the repo. This is your log of what the agent drafted, separate from what you sent — useful for the diff you will include in the capstone. $git add drafts/ prompts/ $git commit -m "drafted replies $(date +%Y-%m-%d)"

Safety norms. Same two: drafts, not sends (the CLI path makes batching tempting; it does not make sending-without-review tempting — the final click stays in Gmail, by you) and least access for the task (same drafts-write scope, nothing wider).

Try it — Three drafted replies RECIPE

three-reply deliverable · open the printable reply-draft checklist →

  1. From yesterday’s triage digest, pick three Reply needed threads. One to a teacher or work contact (formal-warm). One to a friend or family member (informal-warm). One to someone you do not know well yet — a potential employer, a new classmate (neutral-professional).
  2. Draft each reply using the three-context pattern in the Cowork tab (the Claude Code CLI sidebar is fine if you tried it and prefer the batched flow).
  3. Run the five-check review on each draft. For each, record in writing any of the three failure modes you spotted — smooth wrong claim, off-voice, or over-committing — and the specific edit you made.
  4. Send each reply yourself after the review.
  5. For each thread, save a side-by-side of the agent’s first-pass draft and the version you actually sent. Mark each failure-mode finding and each of your edits.

Deliverable. Entry 2 of the capstone log: three reply pairs (agent draft vs. sent version), the five-check review notes for each, and a half-page reflection on which of the three failure modes showed up most in your drafts. This is also the input material for the drill below.

Interactive drill — Review-before-send CORE

browser-based drill · open the drill →

An interactive drill. The page shows you eight agent-drafted replies, each with a Send button and a Review button. Each draft has zero, one, or two of the three failure modes hidden inside it — smooth wrong claim, off-voice reply, over-committing sentence. You mark the failures you spot and write the specific edit you would make before sending. After all eight, the drill shows you what it planted and scores your catches.

The goal is not a perfect score. The goal is recognizing that the smoothest-reading drafts often contain the failures, which is the whole reason the review check is not optional.

Done with the hands-on?

When the recipe steps and any activity above are complete, mark this stage to unlock the assessment, reflection, and project checkpoint.

Stage 3 of 3

Check & Reflect

key concepts, quiz, reflection, checkpoint, instructor note

Quick check

Five questions. Tap a question to reveal the answer and the reasoning.

Q1. “Drafts, not sends” applied uniformly to Module 5 means:
  • A The agent may send routine confirmations and only drafts harder messages.
  • B The agent drafts every outbound email and calendar RSVP; a human clicks Send or Confirm every time.
  • C The agent drafts into a separate app, never into Gmail.
  • D The agent may send once the student has reviewed a few drafts successfully.
Show explanation

Answer: B. The rule is uniform and absolute in this module — no agent sends, regardless of category or agent-confidence history. A is the “just for routine” exception the lesson warns against. C misunderstands what a drafts folder is. D is the “trust is earned” exception — in this module, review is the habit, not a probation period that graduates to auto-send.

Q2. The agent drafts a reply to your cousin. The draft reads: “Thanks for the invite! Happy to help anytime with whatever you need.” What is the problem?
  • A No problem — it is fluent and friendly.
  • B The off-voice reply — you do not speak this way to your cousin.
  • C The over-committing sentence — “happy to help anytime with whatever you need” is an open-ended commitment you did not mean to make.
  • D Both B and C, depending on the student.
Show explanation

Answer: D. Most likely it is C — the over-committing sentence is the most common drafting failure and is exactly the shape of the agent’s instinct to close warmly. If you do not speak in that register to your cousin (most students do not), it is also B. The point is that the draft reads fluently and the five-check review still catches the failure mode. A is the trap.

Q3. The agent drafts a reply. It contains the sentence “I will be there by 4.” You have not checked whether you can. Under the five-check review, which check flags this, and what do you do?
  • A Voice check. Rewrite to sound more like you.
  • B Facts check. Either correct the sentence to a time you can verify, replace with a bracketed placeholder the agent flagged (or should have), or delete the commitment until you have checked.
  • C Relationship fit. Adjust formality.
  • D What is extra. Delete the sentence — it is filler.
Show explanation

Answer: B. Factual commitments — times, dates, specific amounts, attendance — are the Facts check territory. The sentence is smooth-wrong-claim-shaped: fluent, confident, and you do not know if it is true. The defense is the check; you do not send a commitment you have not verified. A correct draft either has a real time, a placeholder ([confirm with Mom]) that you resolve before sending, or no commitment at all.

Q4. Your first draft from the agent has a wrong tone — too formal for a friend. You re-prompt, specifying “this is a friend, first-name basis, warmer.” The second draft is still a little off. What is the recommended next move?
  • A Re-prompt a third time with a longer tone description.
  • B Accept the second draft and send.
  • C Take the keyboard back — rewrite it yourself. Voice is the check you stop outsourcing after one re-prompt round.
  • D Ask a different agent to rewrite.
Show explanation

Answer: C. The lesson’s rule: voice is subtle and relationship-specific; if one re-prompt does not land it, rewriting by hand is faster and more honest than three prompt rounds. A is the “over-prompt” trap. B sends a draft you know is off-voice. D is the same problem with a different model; the other model does not know your friend either.

Q5. You have reviewed a draft and it passes all five checks. Before you click Send, what should you verify one more time about the agent’s state?
  • A That the agent has not started drafting any other messages you did not ask for.
  • B That the agent has not sent anything, has not marked the parent thread read, and has not moved anything out of the agent-access label.
  • C That the agent correctly named the failure modes it avoided.
  • D No additional verification is needed.
Show explanation

Answer: B. The draft-only rail in your prompt and the OAuth scope should both prevent these, but a two-layer check after your first week with a new agent is cheap and catches the edge case where something went wrong. A is a real thing to watch but is not the final pre-send check. C is not something an agent reliably self-reports. D misses the bright line — the check is quick; do it.

Reflection prompt

Which failure mode showed up most — and which messages will you still write yourself?

In 6–8 sentences: Of the three replies you drafted today, which required the most editing from you and why? Which of the three failure modes — smooth wrong claim, off-voice, over-committing — showed up most often in your drafts? Was there a draft where the agent’s first pass was better than what you would have written on your own, and if so, what did it catch that you would have missed? And: in the week ahead, which kinds of messages are you willing to draft with the agent, and which ones will you still write yourself from scratch?

The last sentence is the practical one. A student who can tell you, specifically, “the agent drafts my teacher replies and my cousin check-ins, I write to my grandmother myself,” has built a real working posture. A student who says “the agent can draft anything” has not noticed yet where the voice breaks.

Project checkpoint

Add Entry 2 — drafted replies to inbox-and-calendar-log-v1-draft.md.

Open your capstone log. Add Entry 2 with this shape:

Entry 2 — Drafted replies. Date: [today].

Three reply pairs. For each of the three threads, side by side: the agent’s first-pass draft, the version you actually sent, and one or two lines on the edits you made.

Failure modes spotted. For each reply, note which of smooth wrong claim / off-voice / over-committing showed up, with the specific sentence.

Drafting prompts. The customized three-context prompt you used for each thread.

Reflection. [One paragraph: which failure mode was most common, which message the agent made better, which messages you will still write yourself.]

Safety norm line. Drafts, not sends. Least access for the task.

Do not proceed to Lesson 5.4 until Entry 2 is drafted. The calendar work in 5.4 requires the same review-before-send muscle, applied to a different class of outbound action.

Next in Module 5

Lesson 5.4 — Calendar as a constraint graph.

The same rule, applied to a different class of outbound action. Propose-don’t-book, draft-but-do-not-send RSVPs, meeting-prep briefs in five sections, and the weekly calendar sweep. The constraint graph is the mental model; the five-check review is the muscle.

Continue to Lesson 5.4 →