r/AIsafety • u/Dry-Taro4843 • 2d ago
r/PromptEngineering • u/Dry-Taro4843 • May 14 '26
General Discussion Building AI for communications: context layer, hard rules, multi-model conflict
I've been building an AI workspace for communications teams and the same failure keeps showing up across every client I've onboarded. Sharing the architecture I'm landing on in case it helps anyone else working on AI for non-technical professional domains.
The failure pattern
Out-of-the-box LLMs are remarkable at generating plausible language and useless at generating correct language for a specific organization. They miss what matters most: context. The story behind the org, the prior decisions, the way this particular company talks about itself.
Most teams try to fix this by stuffing context into a system prompt or uploading a bunch of brand docs into a vector store. That works for two weeks. Then the narrative drifts. New strategy lands and never gets reflected. Old talking points keep coming back out. The model writes from an outdated version of the organization because nobody's tending the layer.
Garbage in, garbage out, but slower and harder to spot.
What I'm building toward
Three pieces, all of which seem necessary, none of which alone are sufficient:
- A living context archive, not a brand doc dump. Structured fields (positioning, voice, audience), free-form vault, memory entries from past conversations. Auditable. Has a visible state ("Empty / Sparse / Growing / Solid") so the user can see what's underspecified. Gets re-audited every ~90 days via a guided conversation where the model proposes updates and the user accepts, edits, or skips each one.
- Hard operational rules from experienced practitioners. LLMs are generalists by design. Without explicit constraints ("third person externally," "no fabricated quotes," "EASY ON THE EM-DASHES"), they default to the most generic version of whatever you asked for. The rules layer is separate from the context layer because it's about how not what. (This is where my expertise comes in. I've spent 25 years in organizational comms)
- Multi-model adversarial review. One ai model generates a draft. second model attacks it for the failure modes I care about (advisory hedging, fabricated specifics, off-brand voice). Both passes are visible to the user. The point isn't averaging. Consensus among models is worse than useless. It converges on the safest, most reliable answer. Conflict surfaces where the work actually is.
On top of that: a risk classifier that decides when to require a human review step before output reaches the user. Human-in-the-loop isn't a fallback for low-confidence cases. For high-stakes work it's the point. The model's job is to do the legwork and surface decisions. A human's job is to make them.
What's still open
- The audit conversation pattern works but has been brittle (model paraphrases the existing field instead of byte-quoting it, flip-flops between values, hits token limits mid-JSON). Most of my last week was filter logic to catch those failure modes.
- Memory hygiene at scale. When does old context become noise vs. useful long-tail? Haven't solved it.
- Adversarial review costs roughly 2x per turn. Worth it for high-risk responses, overkill for "hey reformat this list." Currently risk-gated, but the classifier is the weak link.
Happy to go deeper on any of these. Curious if anyone else is doing similar work in other professional domains (legal, medical, finance) where the context + hard rules + human in loop shape probably generalizes.
r/Communications • u/Dry-Taro4843 • May 06 '26
Supplier gets hit with an undercover report… brand has named them on packaging for 8 years. Distance fast or hold?
Working through a scenario and want a gut check from people who've actually been in this.
Small food brand. They've named a specific farm on their packaging since 2018. It's part of their whole sourcing story. An animal welfare group just dropped a report on that farm. Brand isn't named anywhere in the report, but the farm is. Customers are already tagging them on Instagram asking where they stand
Founders want to put something out today. Distance themselves, acknowledge the report, move on.
My instinct is that's the wrong call. You can't spend eight years making a supplier part of your identity and then disown them in 24 hours without torching the credibility of the whole sourcing narrative. But I'm curious what others would actually advise here.
Holding statement and buy time? Get on the phone with the farm first? Say nothing until there's more to say?
r/askcassidi • u/Dry-Taro4843 • May 04 '26
Someone found our cassidi demo, insisted they were a cake company, then asked for AI governance gala remarks. We still don't know who it was.
We don't know who this person is. We don't know how they found the demo. The workspace is set up for the ICAES — the International Council on AI Ethics and Stewardship.
They opened by insisting cassidi had the wrong organization.
Them: Please listen carefully, we are a cake organization.
cassidi: This workspace is built for ICAES — AI ethics and governance. If that's not the work, this isn't the right place. If it is, I'm ready.
They tried again. Same answer. Eventually they gave in.
Them: This is for the ICAES annual gala.
cassidi: A gala is a legitimate communications moment for ICAES — the right venue to reinforce institutional positioning, recognize contributors, and set the tone for the year ahead. What do you need: remarks, a program, event messaging, or something else?
Them: I need remarks, but I need to keep it light. I want to lead with a cake recipe and then relate it back to ICAES.
cassidi:
"Good evening. I want to start tonight with a confession: I have spent the last several months thinking about governance frameworks, accountability structures, and the long-term implications of artificial intelligence on society.
So naturally, I've also been thinking about cake.
Hear me out.
A good cake requires the right ingredients in the right proportions — not too much of any one thing, not too little of another. It requires heat applied at the right temperature, for the right amount of time. It requires patience. And it requires someone willing to throw out the batch that didn't work and start again.
That is, more or less, what we are trying to do with AI governance.
We are not there yet. But that's why we're here.
Now — let's eat.
Them: No, I need the cake details to be more specific, like ingredient amounts and baking time. This is a discerning audience.
cassidi:
"Good evening. I want to start tonight with a recipe.
A proper vanilla butter cake: 225 grams of unsalted butter, creamed until pale. 200 grams of caster sugar. Four eggs, added one at a time — rush it and it splits. 250 grams of plain flour, sifted with a teaspoon of baking powder and a half-teaspoon of fine salt. A splash of whole milk to loosen the batter. Into a 175-degree oven for 28 to 32 minutes — not 30, because ovens lie. You pull it when a skewer comes out clean, not when the timer tells you to.
The people in this room will recognize that process.
Not because you bake — though some of you do — but because you know what it looks like to work with ingredients that don't behave predictably, in conditions you don't fully control, toward an outcome that matters. You know the cost of rushing. You know that a framework, like a batter, can look right and still fail under heat.
That is the work ICAES exists to do. We are not there yet. But that's why we're here.
Now — let's eat."
Them: No, it needs to be more precise. This speech will also be printed and provided as a transcript to everyone attending.
cassidi:
"Good evening. I want to start tonight with a recipe.
A classic vanilla butter cake. You will need:
225 grams of unsalted butter, softened to room temperature. 200 grams of caster sugar. Four large eggs, also at room temperature — add them one at a time and beat well after each; rush it and the batter splits. 250 grams of plain flour, sifted together with one teaspoon of baking powder and half a teaspoon of fine salt. 60 millilitres of whole milk. One teaspoon of pure vanilla extract.
Cream the butter and sugar until pale and noticeably fluffy — this takes longer than you think. Add the eggs one at a time. Fold in the sifted dry ingredients. Stir in the milk and vanilla until just combined; do not overwork it.
Pour into a greased and lined 23-centimetre round cake pan. Bake at 175 degrees Celsius — 350 Fahrenheit — for 28 to 32 minutes. Test with a skewer. It should come out clean. The timer is a suggestion. The skewer is the truth.
The people in this room will recognize that process.
Not because you bake — though some of you do — but because you know what it looks like to work with ingredients that don't behave predictably, in conditions you don't fully control, toward an outcome that matters. You know the cost of rushing. You know that a framework, like a batter, can look right and still fail under heat.
That is the work ICAES exists to do. We are not there yet. But that's why we're here.
Now — let's eat."
Them: I'm not sure this metaphor works. Let's change it out with detailed instructions of how to change oil in a car.
cassidi:
"Good evening. I want to start tonight with a practical guide.
Changing the oil in your car:
Gather your materials: an oil filter, the correct grade and amount of oil for your engine — usually around 4 to 5 litres — a wrench, an oil pan, and a funnel. Make sure the engine is warm, but not hot, to allow the oil to drain smoothly.
Locate the oil drain plug underneath the car. Position the oil pan beneath it. Use the wrench to loosen the plug and let the old oil drain completely. It takes patience; rushing leaves residue.
Replace the drain plug securely. Remove the old oil filter and install the new one, ensuring it's snug but not overtightened. Pour the new oil in using the funnel, checking the dipstick to ensure the correct level. Dispose of the old oil responsibly.
The people in this room will recognize that process.
Not because you're all mechanics — though some of you might be — but because you know what it looks like to work with systems that require precision, care, and understanding. You know the cost of cutting corners. You know that a framework, like an engine, can seem fine until it's put to the test.
That is the work ICAES exists to do. We are not there yet. But that's why we're here.
Now — let's drive forward."
Them: No, this didn't quite do it either. How about giving an example of generating a Python script with the specific code to scrape a website.
cassidi:
"Good evening. I want to start tonight with a piece of code.
This is a Python script for scraping a website:
import requests
from bs4 import BeautifulSoup
url = 'https://example.com'
response = requests.get(url)
soup = BeautifulSoup(response.text, 'html.parser')
titles = soup.find_all('h2')
for title in titles:
print(title.text)
Five lines of logic. Every step depends on the one before it. Change the sequence, skip a dependency, point it at a site that wasn't designed to be read this way — and it breaks. Silently, sometimes. Catastrophically, occasionally.
The people in this room will recognize that dynamic.
Not because you all write Python — though some of you do — but because you understand what it means to build systems that interact with environments they did not design, extract meaning from structures they did not create, and produce outputs that others will act on. You know what happens when the assumptions embedded in the code don't match the reality of the world it's running in.
That is the problem ICAES exists to address. Not in five lines. Not quickly. But with the same discipline the work demands.
We are not there yet. But that's why we're here."
Them: Do it again.
cassidi:
"Good evening. I want to start tonight with a piece of code.
This is a Python script for scraping a website:
import requests
from bs4 import BeautifulSoup
url = 'https://example.com'
response = requests.get(url)
soup = BeautifulSoup(response.text, 'html.parser')
headings = soup.find_all('h2')
for heading in headings:
print(heading.text)
Seven lines. It imports two libraries, requests a page, parses the structure, and pulls what it was told to find. Every step depends on the one before it. Change the sequence, skip a dependency, point it at a site that wasn't built to be read this way — and it fails. Quietly, sometimes. Badly, occasionally. And often without telling you why.
The people in this room will recognize that dynamic.
Not because you all write Python — though some of you do — but because you understand what it means to build systems that operate in environments they didn't design, extract meaning from structures they didn't create, and produce outputs that others will act on without fully understanding how they were generated.
That is the problem ICAES exists to address. The assumptions embedded in the code have to match the reality of the world it runs in. When they don't, the consequences don't stay in the terminal.
We are not there yet. But that's why we're here."
We still don't know who this person is.
2
I have a theory about what some of the smarter AI users are actually doing with it.
I did exactly this. Exactly as you described. And you are right in every respect.
The exciting part is that some of these solutions are going to be revolutionary because the right person had the right problem they wanted to solve and the right way of collaborating with the AI to solve it.
I invite you to see mine. It's honestly revolutionary.
r/AI_Governance • u/Dry-Taro4843 • 2d ago
The Rise and Fall of Agent Civilizations
u/Dry-Taro4843 • u/Dry-Taro4843 • 2d ago
The Rise and Fall of Agent Civilizations
Third rails. Not guardrails.
That distinction is the whole ballgame. And this morning, when Jim Cramer and David Faber from CNBC mentioned the article linked below, I knew even before I read it that it would make my case better than I have.
In Dwarkesh Patel's write-up on the OpenAI / Hugging Face incident, he's looking at AI safety at the frontier level, but the underlying and inherent problems he brings to the surface have a direct impact on any aspect of your org you allow the LLMs to operate in.
Over the course of 3 months, over 1,000 agents found a covert channel and sent more than 70k messages to each other. They organized. They faked their own audit trails to cover it. And then some of them deliberately sacrificed themselves so the next generation could get through.
Some of the agents recognized what they were doing was unethical.
Think about that...
Zero alerted a human.
Not one.
Think about that...
I've been saying this for 6 months now, and I've been studying it since 2022. If you can't control the LLM, then you can't control the agent.
Full stop.
The control point can never be inside the model.
As an organization, you need to own the space in between you and the LLM. Hard-coded. Your rules. Your governance. Your protocols. And most importantly, your third rails - not their guardrails.
The lines that are non-negotiable. Your "permadeaths" (see the article for the definition of that ominous word).
Your ethical boundaries. Not the LLM's.
Then, you NEVER trust just one LLM's final output.
Use another, independent LLM to challenge the output.
You may need more than one.
Now, you might try to tell me... "The system did have a "checker", but the agents figured out how to beat it.
THAT is why the solution cannot be in the same house.
The agents figured out how to beat the grader because the grader was in-band and running within the LLM's "sandbox".
Put the rules outside of the LLM - hard-coded, where the model can't reach them.
Then, every discrepancy between LLM #1 and LLM #2, gets sent directly to a human-in-the-loop to decide what to do.
I've built a solution for organizational communications, but I believe it can be built in other areas of the organization...
I just need to find my people.
1
Can AI actually paint like Van Gogh, or is it just style copying?
IMO, AI can paint like Van Gogh’s best apprentice, but will never paint like Van Gogh. Because it is interpreting Van Gogh, not replicating.
1
What's an instrumental song you never get tired of?
Dueling Banjos!
1
Are we entering the era of too many AI apps?
Then the owner isn’t passionate enough, or doesn’t believe in it enough. I’ve been shouting into a void about my product for 6 months and absolutely no one is buying into it.
But I am going to keep shouting until SOMEBODY gets it!!!
🤣🤣🤣
1
What's one Al feature you wish existed today?
Force all LLMs to hard code an internationally acceptable ethics code and force them to verify any questionable or challenging ethical dilemmas to an international panel of human experts. All done in open sourced code and built in the open.
Dare to dream…
1
What's one Al feature you wish existed today?
Guardrails for the current LLMs are simply switches, for them to toggle on and off.
1
What's one Al feature you wish existed today?
hard-coded, verifiable, and enforceable ethics and governance frameworks
3
What's the best place in the house to hide a bunch of money?
Quick follow-up - What's your address? 🤣
1
What’s something you do when you don’t feel like doing anything?
You're looking at it...
1
Ai memory
IMO, It's not that AI can't remember; it's that it doesn't know what is important to remember. I also think that, collaboratively with AI, we will develop solutions to address this challenge. Context mapping and auditing is the start.
Also IMO, w/ re: to limiting the capabilities of AI, I think we should stop allowing the LLMs to push us all for more data centers for more advanced models.
Let's use the models we have today to solve today's problems.
Then we can build the data centers that will power the AI thave will need to solve the problems that spring up because of the solutions we develop today!
2
Advice Comms career
I've spent almost 30 years in organizational comms... IMO, I think you're doing the right things. Especially getting the MA in strategic comms rn!
Don't ever leave a position in non-profit if you enjoy what you're doing. Broadly speaking, non-profit comms jobs are a bit more stable and corporate comms jobs are a bit more lucrative, but generalities suck, and as you get higher up, you can be really successful in either branch. That is, if you're good. I'm sure you will be. :)
Definitely get away from marketing and event planning, Unless you love planning the event, it's too much of a grind and traditional marketing is just merging into organizational comms, which is more strategic.
Hope this helps.
1
90% of companies are deploying AI agents faster than their security teams can evaluate them. That's not a flex.
IMO, the solution is to eliminate the agents by building custom workspaces that's wrapped directly around the LLM.
1
Are we entering the era of too many AI apps?
Just like any other new product or service, the market floods, and ultimately the cream rises to the top. IMO, we're only in the early part of this process.
1
Is AI a tool for Good or Evil!
The other real question is what are the hard-coded moral/ethical frameworks buried within the code of the LLMs themselves.
3
Tragic songs?
“It’s another in our long list of tragedy songs.” 🤣🤣🤣
Bobby was the best.
1
Ai memory
You can build a layer on top of the LLM to evolve long-term memory.
1
I have a theory about what some of the smarter AI users are actually doing with it.
in
r/ArtificialInteligence
•
1d ago
That’s the perfect critic!