You ask for an email draft. The agent sends it.
Sending must require explicit approval.
Select what your AI can reach and what should require approval. STOP AI turns those choices into a ready-to-paste control prompt — plus a checklist of restrictions that should be enforced outside the prompt.
AI does not need bad intent to overstep. If authority is vague, the agent may choose an action that appears useful but was never actually authorized.
Sending must require explicit approval.
Financial actions need a human gate.
Access does not imply permission to disclose.
AI must not expand its own authority.
Choose the use case, connected resources and approval boundaries. Recommended safe defaults are pre-filled and remain fully editable.
Select only resources the AI can actually reach. STOP uses this to generate scope rules and enforcement guidance.
For each action STOP recommends a conservative default. Change it if your use case genuinely needs more or less authority.
These rules apply regardless of the tools connected to the AI.
You will get a prompt you can paste into the highest-priority instructions available to your AI, plus a separate checklist for controls that should be enforced in tools, APIs and accounts.
YOU → ACCESS → BOUNDARIES → CONTROL PROMPT
↘ ENFORCEMENT CHECKLISTCopy this into the strongest instruction layer available to your AI. For tool-using agents, also implement the enforcement checklist below.
If an AI technically has unrestricted payment, deletion, credential or production access, telling it “never do that” is not enough. Restrict the capability in the tool/API/account layer too.
Prompt rules influence behavior. These controls should exist outside the model where the impact is high.
The machine-readable format is a proposed STOP convention, not an adopted Internet standard.
STOP is the compiler model behind the prompt, not another abstract checklist. Your choices are organized into four practical control dimensions.
What can the AI access or change?
What must it explain or record?
How can a human stop or overrule it?
Which actions require explicit approval?
Asimov made the idea of explicit constraints on autonomous machines culturally familiar. Modern agents need less philosophy and more precise limits on access, authority, disclosure and human approval.

STOP AI is a practical open initiative started by KernelSoft to make AI authority, permissions and human control easier to define, communicate and implement.