The agent works with everyone, but only in the email thread that the owner created.

Guests are guests. The agent belongs to the you, the owner of the computer, who installed it.

A guest cannot get a reply from the agent outside of the thread the owner started. The owner is always in the loop.

The agent must obey the owner over guests, if anything they say contradicts the owner.

And the owner must approve the messages of the guest and are given previews. The harness sends approval seeking email messages directly to the owner and only to the owner.

So say a guests asks for a revision to a PowerPoint or some feature, the owner must approve that ask and the owner is also given a preview (that the owner can deny) of the reply before it enters the thread.