Chapter 02 / 14

Product principles

Preparation, not representation

Delegiert explains, asks, validates, and prepares. Sending a legal declaration, signing a document, or speaking with legal effect remains a visible user or authorized operator action. German telephony stays integration-gated until its legal and operational controls are cleared.

AI reasons; the backend acts

The model receives a thin prompt and can emit structured tool proposals. It cannot connect to Postgres, Redis, a government system, or a vendor API. Trusted Python validates schema, identity, resource scope, consent, idempotency, and policy before execution. Every effect has a correlation identity and bounded audit evidence.

Provenance before confidence

Administrative claims come from versioned sources. Publication is explicit; draft content cannot appear because a query forgot a status filter. Evidence records say what source was checked, when, how, by whom, and when it needs review.

Data minimization

Form answers remain on the device or transient request path unless a separately consented feature needs storage. Presentation demos never persist their synthetic answers. Voice samples are not stored in Postgres. Logs contain bounded identifiers and error classes, never document contents or raw tool arguments.