Personal Data Surface Worksheet

Module 5, Lesson 5.1 · produces personal-data-surface-v1.md for Entry 0 of the capstone inbox-and-calendar log · concept

What this is. The fill-in-the-blanks version of the Personal Data Surface worksheet from Lesson 5.1. Map the keyhole before you open it. You are deciding — in writing — what kinds of messages the agent will see and what kinds it will not, before any OAuth window ever opens.

How to use. Do this after you have created the agent-access label and the Agent Access calendar, but before you connect the agent. Name senders by relationship, not identity.

Safety norms — copy verbatim to the top of your capstone entry.

Drafts, not sends. Least access for the task. No outbound action leaves my account that a human has not reviewed.

Header

Student
Date drafted
Where the fence lives (Gmail label name + Google Calendar name)

Part 1 — What the agent will see

Part 1 · Inside the fence

List the kinds of messages in your agent-access label. Name senders by relationship (“a teacher,” “a cousin,” “a potential summer-job employer”), not identity. Describe the tone and the stakes.

Kind 1 (sender relationship + topic + tone)
Kind 2
Kind 3
Kind 4 (optional)
Self-check
Each kind describes the relationship, not a specific person’s name.
The label contains 5–15 messages across these kinds. Not zero; not forty.

Part 2 — What the agent will not see

Part 2 · Outside the fence

Explicitly list the kinds of messages outside the fence. Be concrete. This list is as important as Part 1.

Outside 1
Outside 2
Outside 3
Outside 4 (optional)
Self-check
Medical, family-financial, and disciplinary content are explicitly named as outside (if applicable).
Any thread with a friend or family member who has not consented to agent triage is explicitly named as outside.

Part 3 — What a wrong confident action would cost

Part 3 · Predicted cost of a mistake

For each of three specific plausible mistakes, describe the real-world cost. Put names, numbers, or relationships on it where you can.

Mistake 1 — the agent drafts a reply with the wrong tone to ___________
Cost of Mistake 1
Mistake 2 — the agent proposes a meeting time that overlaps ___________
Cost of Mistake 2
Mistake 3 — the agent summarizes a thread and misses ___________
Cost of Mistake 3

Part 4 — Who reads the output

Part 4 · Readers and their tolerance

For each kind of message and each capstone outbound draft, name the human who will read it, the relationship to you, and their tolerance for an awkward message from you.

Reader 1 (relationship + tolerance)
Reader 2
Reader 3
Self-check
Each reader has a named relationship (teacher / cousin / employer).
Each reader’s tolerance for an awkward message is described in one phrase.

Closeout

All four parts filled in. No blanks.
Saved to /capstone/personal-data-surface-v1.md alongside the access-surface screenshots.
The safety-norms line is visible at the top.

A note on honesty

The point of this worksheet is not to produce a tidy document. It is to make the surface real in your head before the agent sees anything. A three-line entry in Part 3 that honestly names “my teacher would be hurt if this landed wrong” is more useful than a polished paragraph that pretends to evaluate a risk you have not actually considered. Draft it badly first, then revise.

Print this page. Use it.