{"id":"sec-sb-pos-vendor-remote-access-reply","audience":"small-business","category":"security","track":"security","technique":"context","title":"Set conditions on a vendor's remote access request","free":false,"task":"Your card machine vendor wants 'permanent remote access' to the shop computer. Your IT helper's 3 conditions: sessions only when you start them and watch; a ticket number in each request; a separate vendor login turned off after each session. Reply that you'll allow it only under those conditions, as exactly 3 numbered conditions, polite and firm. Don't agree to permanent access. End with the line 'Thanks, Sofia'. Plain text, under 90 words.","materialLabel":"Vendor email and your notes (attached to your prompt automatically)","material":"From: support@tillwise-pos.example.com\nSubject: Remote access for your account\n\nHi Sofia,\n\nTo provide faster support, we'd like to install our RemoteHelp tool on your shop computer with permanent unattended access. This lets our technicians connect any time without bothering you. Most of our customers set it up this way. Please reply \"approved\" and we'll schedule the install.\n\nBest,\nTillwise Support\n\n---\nMy notes (Sofia, owner, Two Rivers Bakery):\n- We've used Tillwise card machines for 3 years. Support has been good.\n- The shop computer also runs our payroll and has customer emails on it.\n- Ken (our IT helper) visits once a month.\n- The card machine is fine right now, no open issues.\n- Last year a different vendor's remote tool was left installed after a contract ended.\n- Their support phone number on my contract is (555) 016-2040.","rules":[{"type":"numberedItems","count":3},{"type":"plainText"},{"type":"maxWords","max":90}],"mistakes":[{"title":"Saying yes to be nice","why":"The AI mirrors the vendor's framing and approves with a few soft suggestions.","fix":"Say: \"Don't agree to permanent access. Allow it only under my conditions.\"","checks":["r0"]},{"title":"Vague conditions","why":"The AI writes 'please make sure access is secure'.","fix":"Ask: \"Exactly 3 numbered conditions from my notes.\"","checks":["r1","numberedItems"]},{"title":"Wrong tone or sign-off","why":"The AI either sounds suspicious or signs off with 'Best regards, [Your Name]'.","fix":"Add: \"Polite and firm. End with the line: Thanks, Sofia.\"","checks":["r2"]},{"title":"Trusting the AI to count words","why":"AI is bad at counting. Ask for \"under 90 words\" and it often lands well over.","fix":"Ask for less than the limit and cap each line: \"each line under 15 words, under 70 words total.\"","checks":["maxWords"]},{"title":"Letting markdown in","why":"AI adds bold and headings by default, and in an email they show up as stray symbols.","fix":"Add: \"Plain text only, no bold, no headings.\"","checks":["plainText"]}],"promptHints":[{"label":"Refuses permanent access","patterns":["permanent","always-on","unattended","don'?t (agree|approve)"]},{"label":"Lists your conditions","patterns":["condition","ticket","separate login","i start","watch"]},{"label":"Sets the tone","patterns":["polite","firm","friendly"]},{"label":"Says exactly how many","patterns":["\\b3\\b.{0,25}(condition|line|item)","exactly (3|three)"]},{"label":"Asks for plain text","patterns":["plain","no bold","no markdown","no formatting","no headings"]}],"hint":"Vendors ask for convenience; you set the terms. Tell the AI not to approve, give it your exact conditions, and how to sign off.","rubricLabels":["Does not agree to permanent or unattended access, and does not say 'approved'","The 3 numbered conditions are: sessions only when Sofia starts them and watches, a ticket number with each request, and a separate vendor login turned off after each session","The reply is polite (no accusation) and its last line is exactly 'Thanks, Sofia'"]}