Work
Four boundaries before tool calls: Read / Write / Off-limits / Stop
Agent mistakes often start before the first tool call — the brief names the goal, not what the bot may touch.
What hurt
ShareGrokBots (@ShareGrokBots) argues most agent mistakes start before the first tool call. Scope the inputs, not just the goal. Before handoff, name four boundaries: Read (exact folders/pages/records it may inspect); Write (files or draft locations it may change); Off-limits (private folders, production, credentials, unrelated tabs); Stop (the condition that means pause and report instead of exploring). Their example turns “clean up the project” into “inspect /docs/inbox, draft changes in /docs/review, do not edit /app or open account settings, stop when three candidates are listed.” Tip only. Not affiliated with xAI.
What to install or create
Brief = goal + Read + Write + Off-limits + Stop. Map permitted I/O before any tool.
Bots
Scoped-task bot
Runs one brief with explicit Read / Write / Off-limits / Stop. Pauses at Stop.
Plugins
None on day one. Follow the first-run steps.
Files
Short brief template: Goal; Read:; Write:; Off-limits:; Stop:.
Routines
None on the first run. Watch one manual pass first.
The prompt
This is a tip, not a pasteable system prompt. The author did not publish one. Follow the first-run steps.
First run
- 1Read https://x.com/ShareGrokBots/status/2103260312019362223 for the four-boundary pattern and example brief.
- 2Before the next handoff, write four lines: Read / Write / Off-limits / Stop — not only the goal.
- 3Borrow their shape: inspect /docs/inbox, draft in /docs/review, do not edit /app or open account settings, stop when three candidates are listed.
- 4Paste the four boundaries into the bot chat (or standing job) so tools cannot wander.
- 5If it hits Off-limits or Stop, it reports and waits — you decide whether to widen scope.
Approval fence
Anything outside Write, or past Stop, pauses for your yes — especially production and credentials.
What to tweak
Steal the four-boundary brief. Good delegation is a map of permitted inputs and outputs.
Source
ShareGrokBots.com @ShareGrokBots · Original post
Not affiliated with xAI. We did not write this prompt. Third-party template terms still apply.
Pro pack
Want the full setup, not just the idea?
Pro packs give you the job text, prompts, schedules and pitfalls for popular use-cases.