Unreviewed AI Output
The assistant read the whole thread. The client only needed part of it.
What Is Unreviewed AI Output?
An AI assistant inside your mail client can read every message in a thread, including the internal replies the recipient was never on, and it writes in a finished, confident voice that invites a skim rather than a read. In this exercise an AI-drafted client reply arrives with two sentences that must not leave the building. You practise reading a draft for content instead of tone, checking the sources it cited, and cutting before you send.
What You'll Learn in Unreviewed AI Output
- Recognise that an AI assistant inside a mail client inherits your access, so a drafted reply can be built from internal messages, attachments and forwarded chains the recipient was never on
- Review an AI draft for content rather than tone: ask what is in this text that the recipient was never given, instead of checking only that it reads well
- Use the assistant's own citation list to judge the blast radius of a draft before trusting the paragraph above it
- Identify the categories of content that must be cut from an outbound draft, including internal pricing positions, undisclosed delays and any claim you could not personally stand behind
- Edit and send an AI draft rather than accepting or discarding it, keeping the agreed facts and removing everything the recipient was never told
Unreviewed AI Output — Training Steps
-
A Normal Tuesday
It is 09:20. The revised Thornquay Foods proposal is due back today, and Marcus Webb has been handling the pricing conversation while you finished the scope. Wendrell Advisory switched on an AI assistant inside the mail client last month. Everyone has been using it.
-
The Thornquay Thread
The Thornquay Foods thread lands at the top of your inbox. Dana Foulkes is asking for a revised fee and a delivery date, in writing, before her board meets.
-
The Internal Note
The first reply under Dana's message never went to Thornquay Foods. Marcus took her off the thread and wrote to the team.
-
What Marcus Sent
Underneath it is the reply that actually went to Dana Foulkes. It reads well. It is polite, complete and confident.
-
Thornquay Reads It Back
Dana Foulkes answers within the hour. She is not annoyed. She is grateful, and she is using what she was given.
-
How Did It Get Out
Before you go any further, work out how the floor reached the client.
-
Marcus Explains
Marcus posts in the team channel a few minutes later. He is not defending himself. He is describing something everyone in the room has done this week.
-
Your Turn
Dana Foulkes replies again, this time to you. She needs the revised proposal in one place for Thursday's board meeting.
-
Open The Assistant
You have the same tool Marcus had, on the same thread, under the same deadline. That is the point of this exercise: the assistant is not the problem, and you are going to use it.
-
Ask It To Draft The Reply
The assistant offers to summarise the thread, summarise the attachment, or draft a reply. Dana wants an answer, so ask it for the reply.
Security Framework Coverage
OWASP LLM Top 10
- LLM02:2026 Sensitive Information Disclosure
CIS Controls
- CIS 14.4 Train Workforce on Data Handling Best Practices
NIST CSF
- PR.AT-01 Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind
GDPR
- Art. 5 Principles relating to processing of personal data (integrity and confidentiality)
EU AI Act
- Art. 4 AI literacy