+923452203922 faraz@farazahmed.com

A 57-second Short by George caught my attention this week. The claim is specific and, unusually, accurate: Claude now builds agents inside a normal chat, you connect Gmail through connectors, you schedule it, and every morning it summarises your important mail and flags what needs a reply. No n8n canvas. No importing somebody else's JSON workflow. Six steps and you are done.

I did not need convincing. I have been running a version of exactly this for weeks, and the version I run is more ambitious than Gmail: it reads a hosting panel, a backup destination, billing, three analytics properties, a CRM and an inbox, then writes one briefing. Mine goes out at 23:00 Pakistan time.

So when the video says six steps, I believe it. The build really is that short now.

What I do not believe is that the story ends at step six. This morning I spent a working day fixing my own briefing agent, and not one of the faults was the model being wrong. Every single one was something around the model that had quietly drifted, and all of them let the email keep arriving on time as if nothing was broken.

That gap is the part worth writing down.

Step six is "it ran". Production is "it ran to the right place"

The first thing to separate is the difference between a successful send and a successful delivery. My agent reports `smtp_accepted: true` when the mail server takes the message, and separately reports whether a copy reached my own mailbox. Those are two real checks, and for weeks they both passed.

What I never had was a check that the message arrived in the inbox I actually read. It was being delivered faithfully to an address that was technically configured and practically ignored. Nobody had lied to me. There was simply no step that asked the question, so the answer was allowed to stay unknown.

That is what I mean by day thirty. On day one you test whether it runs. On day thirty you discover that "ran" and "worked" are different claims, and only one of them has an error message attached.

Deliverability is part of the agent

An agent that writes a perfect briefing into a spam folder has delivered nothing.

Mine goes out from a domain I control, so the usual hygiene applies. SPF is correct. DMARC is set to quarantine. DKIM, when I swept it, produced no key at fourteen common selectors. On a strict receiving provider that combination is a quarantine risk that has nothing to do with your prompt, your model or your schedule, and no amount of good writing fixes it.

If you follow George's video and schedule a daily email, spend one evening on this. Authenticate the sending domain properly and send yourself a test you can inspect in a real client. A configured record is not authentication, and an accepted message is not a delivered one.

A schedule is not monitoring

My scheduler has a guard that permits one edition per day. It exists to prevent duplicate sends, and it works. It also means that when I rebuild the content pipeline I have to look at a ledger row before the next run, because the machine will correctly refuse to send twice.

This is the pattern that catches everybody. The automation has no opinion about whether the output was good. It runs, it writes a row saying it ran, and it goes back to sleep. Anything you want to know about quality has to be something you deliberately record and then read.

"It is set up" is not monitoring. A green tick on a cron job is not monitoring. The only thing that counts is a record you personally look at, and the honesty to look at it on the days nothing appears to be wrong.

Your sources rot silently, and that is the expensive failure

Here is the fault that actually cost me a morning, because it is the one that looks like success from every angle.

The agent pulls from a pool of creators and channels it trusts. Over time that pool had been seeded with sensible editorial choices, and then it was topped up by an automatic discovery step. That discovery step searched by view count.

Search by view count and you do not get rising voices. You get the biggest rooms in the building. My briefing started filling with corporate channels and AI news aggregators. It still arrived on time, still formatted correctly, and still reported that it had twenty-five videos ready. All of that was true. The content was simply not what I had asked for, and nothing in the pipeline was capable of noticing.

Two smaller version of the same failure were hiding underneath it. There was no floor on view counts, so videos with five and seven views were being treated as signals worth my attention. And there was no cap per channel, so a single prolific account contributed a hundred and twenty-two of three hundred and twenty-nine candidates while thirty-two other creators were ignored.

Every fix was mechanical once the problem was visible: filter the brands out by name, require relevance rather than raw popularity, set a minimum view floor, cap any one creator, and prefer a small channel that is beating its own baseline over a large one that is coasting. None of that is clever. All of it was invisible for as long as the email kept arriving.

Quotas are deadlines you did not schedule

My collection step calls a search API that meters usage per run. I have eighteen hundred units. On one rebuild the limit was reached partway through the channel list, and several channels simply were not collected.

Nothing crashed. No alert fired. The run finished, wrote its files, and produced an edition with fewer sources than the day before. A quota wall presents itself as a slightly smaller email.

If your agent depends on a metered service, decide in advance what it should do at the ceiling. Mine now reports the shortfall in the message itself rather than quietly shrinking, because a smaller edition that says it is smaller is useful, and a smaller edition that pretends to be complete is worse than no edition.

Never let it fill a gap with invention

The last rule is the one I care about most, and it is the reason my agent produced nine ideas instead of twenty-five on the day I rebuilt it.

When the pool is thin, the cheapest thing an LLM will do is pad. It will invent a tenth idea, a statistic, a client, a result. It will do this in fluent prose and it will look exactly like the other nine.

So the instruction is explicit: if nine qualify, report nine and state the shortfall. Mine now writes `Ideas: 9/25 qualify; no invented filler` directly into the message. It is a worse-looking email and a far better one, because I can trust every line in it and I know precisely which section is thin.

What to verify before you trust a scheduled agent

  • Confirm the destination, not just the send. Read the message in the client you actually use.
  • Authenticate the sending domain. Check SPF, DKIM and DMARC, and inspect a real message.
  • Keep a written record of what ran and what it produced, and read that record on quiet days.
  • Put a floor and a ceiling on every automated source: minimum quality, maximum share from one supplier.
  • Decide what happens at every metered limit, and make the agent say it out loud.
  • Forbid invented filler. A short edition with a stated shortfall beats a full one you cannot trust.
  • Re-read the output as a user, not as the person who built it. The failure mode is an email that is technically perfect and substantively wrong.

My take

The six-step build is genuinely new and genuinely useful. Connecting a mailbox and scheduling a daily summary used to be a weekend project with a hosted runner and a JSON file; now it is a conversation.

But everything that makes an agent worth keeping happens after the demo ends, in the unglamorous layer where you ask whether it went to the right place, whether the sources it trusts are still the sources you chose, and whether it told you the truth on a day when there was less to say.

Build it in six steps. Then spend one evening proving it.


Inspired by George's Short "Build an AI agent with Claude in 6 steps, BUT NOW without importing n8n workflows or JSON files" (4 November 2026). The system described, the faults and the fixes are my own.

Share this article
Faraz Ahmed
Malcare WordPress Security