> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ledgerup.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Guardrails and Limits

> The boundaries Ari works within by design, where he needs a human, and what he doesn't do yet.

Ari is a strong teammate, not a finished one. Here's where he works within deliberate
guardrails, where he still needs a human, and what he doesn't do yet. We keep this page
current; if something here blocks your workflow, tell us at [support@ledgerup.ai](mailto:support@ledgerup.ai).

## Guardrails by design

These aren't gaps. They're how Ari is built to be safe.

<AccordionGroup>
  <Accordion title="Does Ari ever act without approval?">
    No. Ari will not send, create, change, or delete anything until a person has approved
    it. Write access to a connected system is capability, not permission to skip that step.
    Automations set to auto-execute are the one variation: there you approve the behaviour
    once, when you configure it, instead of on every run.
  </Accordion>

  <Accordion title="Can I undo an action once I've approved it?">
    Not from Slack. Once you approve an action, reversing it (voiding an invoice, following
    up on a mis-sent email) is a new action, not an undo button. The approval step is the
    safety net; use it.
  </Accordion>

  <Accordion title="Does Ari ever see raw payment data?">
    No. Ari never sees or handles card numbers. Payment methods are tokenized and stored in
    Stripe, in line with PCI requirements.
  </Accordion>

  <Accordion title="Who can see a customer's contract?">
    Access is permission-scoped: team members can only view contracts for customers they
    have access to.
  </Accordion>
</AccordionGroup>

## Where Ari needs a human

<AccordionGroup>
  <Accordion title="How does Ari handle complex or heavily negotiated contracts?">
    Term extraction is accurate on standard agreements, but heavily negotiated or unusual
    contracts should be reviewed by a person before invoicing from the extracted terms.
  </Accordion>

  <Accordion title="What happens with ambiguous reconciliation matches?">
    High-confidence matches complete automatically; anything uncertain (odd amounts, unclear
    payers, overpayments) is flagged for your judgment rather than guessed at.
  </Accordion>

  <Accordion title="Does Ari make collections judgment calls, like escalating or writing off a balance?">
    No. Ari drafts and sends reminders on your playbook, but deciding to escalate a
    relationship, negotiate a settlement, or write off a balance is yours. He'll prepare the
    context; you make the call.
  </Accordion>

  <Accordion title="What happens when Stripe, HubSpot, and Salesforce disagree about a customer?">
    Ari surfaces the conflict and asks you to pick the source of truth instead of silently
    choosing.
  </Accordion>
</AccordionGroup>

## Operational limits

<AccordionGroup>
  <Accordion title="Where can I talk to Ari?">
    Three places: Slack, email, and chat in the LedgerUp platform. Settings and email
    templates are managed in the LedgerUp control panel.
  </Accordion>

  <Accordion title="Does Ari remember context across Slack threads?">
    Ari remembers everything within a thread, but a new thread starts a fresh conversation
    (with full access to your data, minus the conversational context). Use
    [Instructions](/ari/guides/instructions) for anything he should remember everywhere.
  </Accordion>

  <Accordion title="How fast does Ari respond?">
    Ari queries your systems in real time rather than serving cached data, so answers are
    current but not instant. First answers typically take a few seconds, and large
    cross-system analyses can take minutes.
  </Accordion>

  <Accordion title="Which integrations does Ari support?">
    Out of the box, Ari works with Stripe, Chargebee, HubSpot, Salesforce, Attio,
    QuickBooks, PandaDoc, DocuSign, and email. The Enterprise tier supports additional
    integrations beyond this list; if your billing truth lives elsewhere, talk to us.
  </Accordion>

  <Accordion title="Is Slack the system of record?">
    No. Slack messages follow your workspace's retention policy, so treat threads as the
    conversational view. The complete audit history lives in the LedgerUp platform and
    covers everything that runs through LedgerUp services. See
    [Activity history](/ari/answers/activity-history).
  </Accordion>
</AccordionGroup>

## What to do when you hit a limit

<AccordionGroup>
  <Accordion title="What should I do if Ari can't do something I need?">
    1. **Ask Ari anyway.** He'll tell you when something is outside what he can do, and
       often suggests the closest thing he can.
    2. **Check your [Instructions](/ari/guides/instructions).** Unexpected behavior
       is sometimes a standing rule you forgot. `@Ari why did you do that?` shows which
       prompts he applied.
    3. **Tell us.** [support@ledgerup.ai](mailto:support@ledgerup.ai). Limitations get removed in roughly the order
       customers hit them.
  </Accordion>
</AccordionGroup>