Driving the
Working Horsesaying what you want, once
A horse that stops at every gate is safe. A horse that does the job you actually meant is useful. Today is the difference between the two.
By the end of today you will be able to describe a job so you get what you wanted, write your house rules into the folder once, and know which jobs to hand over first.
Presented by Emile du Toit
brainitconsulting.com
Last session was what it is. Today is how to drive it.
- It can act — read a file, write a file, run a command, search the web — inside the one folder you opened it in.
- It stops at every gate. Before any change it tells you what it plans to do and waits.
- You can take the reins back at any moment. Escape stops it, and saying no is steering rather than starting again.
- There is still no undo after the fact, which is why we work on copies until session seven.
So it is safe. Now let us make it useful.
Contents
- Giving it a jobHow to say what you want, once.
- The saddle, fitted in the roomStop retyping yourself.
- Two working horsesClaude Code and Codex, briefly and fairly.
- What to hand it firstAnd what to keep well away from it.
- Before the next sessionOne small job, on a folder that doesn't matter.
Then the questions this always raises, the glossary so far, and the picture to photograph.
Giving it a job
The skill is describing work clearly. You already have it.
Dale has three estimates sitting in a folder from last session, and on Friday he wants to ring people back. What he actually wants is one sheet of paper telling him who is waiting, for how much, and which ones he cannot send yet. That is a job, and how you ask for it decides what you get.
You will get something. It may not be the thing.
Sort out my estimates.
You get the sheet Dale asked for.
Read every file in estimates/ and make me
a one-page summary called friday-callbacks.txt.
For each one: customer, total, and whether it's
ready to send. Put the ones that need me first.
Three things did that work, and they are the same three every time.
- Where to look. "Every file in estimates/" — it does not have to guess which files you meant.
- What done looks like. A named file, with named contents. Not "summarise them".
- What matters most. "The ones that need me first" is the sentence that makes the sheet useful on a Friday afternoon.
Describe the job the way you would to a capable new employee on their first morning — someone sharp, who does not yet know your business, and who will do exactly what you said.
You have written that instruction a hundred times in your working life. This is the same skill, and it is the skill that matters most.
One job at a time. Ask for the summary. Look at it. Then ask for the next thing. Handing over five jobs in one paragraph is how you end up with four you did not check and one you did not want.
The saddle, fitted in the room
You met this in session one. Here it lives in the folder.
In the first session the saddle was the standing instructions: who you are, what you always do, the facts it may rely on, and the nevers. You wrote them once and every ride started properly. That was in a browser, and it followed you around inside one product.
Down here it is simpler and better. The standing instructions are a file in the folder, in plain English, and the assistant reads it whenever it starts work there. Nothing to configure and nothing to log into — the saddle hangs in the room with the rest of the gear.
What this folder is. Dale & Son, a two-truck residential plumbing company. This folder turns inquiry emails into written estimates.
Always. Price from rate-card.txt. Labor and parts on separate lines. Show the service call separately. Add sales tax at the end.
Never. Never price gas work — flag it for Dale. Never promise a date. Never guess a price: list what we'd need to know.
Tone. Plain. The customer is not a plumber.
That is the file, in full. It is the same words Dale would say to a new apprentice, written down once.
The gain is not that it saves typing, though it does. It is that the rules stop living in your head. Anyone who opens that folder — you next March, your daughter covering the phones, whoever you eventually hire — gets a horse that already knows the house rules.
Write the rules down once. Then they belong to the business rather than to you.
Two working horses
Both are good. The choice matters less than the practice.
There are two of these worth your attention, and they do the same job in much the same way. Anything you learn on one transfers to the other in an afternoon.
The honest advice is the same as session one, for the same reason. Pick one, use it on real work for a month, and get good at it. The difference between the two is far smaller than the difference between someone who has driven one for a month and someone who has read about both.
Both come with the paid plan you may already have — around twenty dollars a month — and both eat sugar cubes as they work. A working horse eats rather more than a riding one: it is reading whole files and running things, not answering a question. Watch what a job costs you the first few times, the same as you would watch the meter on anything else.
What to hand it first
Start where being wrong is cheap and obvious.
The first job you give a working horse should be one where a mistake makes you laugh rather than reach for the phone. That rules out rather less than you would think, because most office work is recoverable and most of it is dull.
Good first jobs
- Turn a pile of things into one sheet. Estimates into a callback list, receipts into a total, a week of notes into a summary.
- Reformat something. Same information, laid out the way you actually want it.
- Read a long thing and tell you the three lines that matter. A contract, a spec, a supplier's terms.
- Draft the reply you always write. It goes in a file. You read it, change it, send it yourself.
- Tidy a folder. Consistent names, obvious structure — on a copy.
Not yet
- Anything with one copy. The only version of a document, the master price list, the folder you have never backed up. Not until session seven.
- Anything that leaves the building on its own. Emails to customers, invoices, anything with a price on it going to a real person.
- Work you cannot judge. If you couldn't tell a good answer from a bad one, you cannot check it, and you are not supervising — you are hoping.
- Your whole computer. One job, one folder. It was true last session and it is more true now that it can act.
Copy the file into the project folder and let it work on the copy. Leave the original where it lives. It is clumsy, it costs you ten seconds, and it makes every mistake in this session survivable.
Session seven fits a proper safety net and you can stop doing this.
Before the next session
One small job, on a folder where nothing matters.
Next time lids come up and we work together, so arrive having done this once on your own. It is twenty minutes and the point is to watch a gate open, not to get anything useful done.
- Open the
tack-roomfolder you made last session. If you skipped that, make a folder anywhere and put two or three copied files in it. - Start the assistant in that folder — the panel down the side, or
claudein the black one. Either. - Check it's on "ask me every time." That's the setting near the box you type in. This matters more than anything else on this list.
- Ask it something harmless first: "What's in this folder, and what do you think it's for?" Nothing gets changed by a question.
- Now give it one small job. "Make me a file called notes.txt that lists what's in this folder and what each one seems to be." Small, checkable, and nothing of yours is at risk.
- Watch the gate. When it asks permission, read the prompt properly before you answer. That is the exercise.
- Say no once, on purpose. Decline something and see what it does. People are nervous of that button until they have pressed it.
- Stop there. Don't point it at your real work yet. That's session seven, once you have the undo.
Everything from every session is in the class folder online, with a marker for the start and end of each workshop. If step two defeats you on a Tuesday evening, go and look at what your screen was supposed to look like. It is at github.com/brainit-consulting/ai-workshops — pick end-of-006 from the dropdown, then the green Code button and Download ZIP.
Questions people actually ask
The ones that come up once you are actually driving.
Do I have to watch it the whole time?
You watch a green horse. You check on a proven one.
At the start, yes, and it is time well spent — you learn what it does with your kind of work. Once a particular job has gone right a dozen times you will find yourself glancing rather than staring. What should not change is checking the end of it. That is the part that stays yours.
It did something odd and I don't know why.
Ask it. It remembers the ride.
Type "what did you just do, and why?" and it will walk you through it. That is not a trick question — it is the ordinary way to work out where an instruction was read differently than you meant it. Nine times in ten the answer is that the instruction was looser than you thought.
What happens if I approve something and it turns out to be wrong?
Today, you fix it by hand. That's the honest answer.
Right now there is no undo beyond what your own computer offers, which is why we are working on copies. Session seven is entirely about this: keeping every previous version of everything so any mistake becomes a step backwards rather than a rebuild. If that gap makes you uneasy, good — that instinct is the reason session seven exists.
Couldn’t I just use one of those sites that builds the whole app for me?
You can. It is a rented horse, in a stable you do not own.
There is a whole category of these now, and they are genuinely impressive. You describe what you want in a browser, and a working thing appears in minutes with nothing to install. For a rough prototype, or for proving an idea to a partner on a Friday afternoon, that can be exactly the right call and I would not talk anyone out of trying one.
Understand the trade you are making, though, because it is easy to miss when the thing works on the first try. What you build lives on their platform, in their account, in their shape. You are renting the horse, the tack and the stable together. The monthly fee continues whether you ride or not, and it continues forever, because the day you stop paying is the day you walk home — frequently without the work.
The second cost is quieter. What you learn is their buttons rather than the craft. Move to a different one, or outgrow it, and much of what you knew does not come with you.
Everything in this series goes the other way on purpose: the files sit in a folder on your own machine, in ordinary formats, and every tool around them can be swapped for a different one. It is slower to begin and you end up owning the outfit.
The question worth asking before you commit: if that company closed tomorrow, or tripled its price, what would I still have? For a prototype, "nothing much" is a perfectly good answer. For the thing your business actually runs on, it is not.
Plain words
Everything the series has named so far. Today's are marked.
This list grows every session and always shows the lot, so you never need last week's handout to read this week's.
- Large language model (LLM) 001
- The engine that predicts the next word. The horse.
- GPT 001
- Generative — it makes new text rather than looking up a stored answer. Pre-trained — all its learning happened in advance. Transformer — the design of the machinery underneath. A breed name, not a job title.
- Knowledge cutoff 001
- The date its training stopped. It knows nothing after it, and doesn't know that it doesn't. The last day the horse was out in the world.
- Prompt 001
- What you type. A pull on the reins.
- Chatbot 001
- A model you can talk to, turn by turn. Horse plus bridle.
- System prompt / instructions 001
- Standing orders sent with every message, whether you type them or not. The saddle.
- Context window 001
- How much of the conversation it can hold at once. How far it can see on this ride.
- Token 001
- A chunk of a word — how length is counted, and how you're billed. Sugar cubes.
- Hallucination 001
- Making something up and sounding certain. Shying at a shed snakeskin.
- Tool 002
- A specific action it's allowed to take in the real world. A saddlebag.
- MCP 002
- An agreed standard for plugging tools into a model. Standard-size buckles.
- Agent 002
- A model given a goal, tools, and permission to keep going. A working horse, not a show pony.
- Agentic loop 002
- Look, decide, act, check, repeat. The ride itself.
- Human in the loop 002
- A person approves before something real happens. A hand on the reins.
- Automation 002
- The same work happening without you starting it each time. The horse knows the route.
- File 003
- A thing with a name and contents. A single piece of gear.
- Folder (directory) 003
- A box holding files, and sometimes other folders. A shelf.
- Project 003
- One folder holding one job's worth of everything. The room, with the door shut.
- Path 003
- The written address of a file — which boxes it sits inside. Directions to the shelf.
- Editor (VS Code) 004
- A window showing you one folder and everything in it. The tack room.
- Terminal 004
- A panel where you type an instruction to the computer directly. Talking to the stable itself.
- Install 004
- Putting a program on your own machine, once. Building the room.
- Permission prompt 005
- The stop before it changes anything, showing what it plans to do. The gate, and your hand on the latch.
- Approval mode 005
- Whether it asks every time, works on its own, or only shows a plan. How loose you're holding the reins.
- Interrupting 005
- Stopping it mid-job with the escape key. A pull on the reins. Ordinary.
- Project instructions 006
- A plain-English file of standing rules that lives in the folder. The saddle, hanging in the room.
- Run a command 006
- Doing something on the computer rather than writing words about it. Actual work, not conversation.
- Working on copies 006
- Duplicating a file so the original can't be harmed. Schooling in the paddock, not on the road.
Everything on one page
Photograph this before you go.
1 · Say where and what
Where to look, what done looks like, what matters most.
2 · Rules in the folder
Write them once. The business owns them, not your memory.
3 · Pick one, learn it
Claude Code or Codex. A month on one beats a week on both.
4 · Breadcrumbs
The undo. Every step a gate you can ride back through.
Next session is the safety net. Once you have it, you can stop working on copies and point this at work that matters.
#007 — Breadcrumbs
Everything so far has one hole in it: approve a change on Tuesday, realise on Thursday it was wrong, and nothing helps you. Next time we fix that permanently — a way of keeping every previous version of everything, so any mistake becomes a step backwards rather than a rebuild. It is the session that lets you stop working on copies.
Before you come: do the small job above, and notice the one moment you wished you could undo something. And please install git first — go to git-scm.com, click download, and accept every screen the installer offers. One download, and it saves us fifteen minutes in the room.
I do this for a living, and love to help people.
Thirty-plus years in enterprise software and a computer science degree — which mostly means I have watched a great many horses bolt, and I can usually tell you which ones are worth saddling before you spend money on the saddle.
In person
Your team, your room, your actual work on the whiteboard instead of somebody else's examples.
Over video
The same session, at your desks, with fewer chairs to stack afterwards.
Built for real
When the idea survives the workshop and somebody has to go and build the thing — that part I do too.
Fun fact — I rode to school on horseback as a kid in South Africa. So the metaphor isn't borrowed. I've done the falling off in person.
Emile du Toit brainitconsulting.com
Workshop #006 · Driving the Working Horse
© 2026 Emile du Toit, BrainIT Consulting
Print it, download it, share it with your team. Just leave my name on it.