#002 Saddlebags and the Ride Download
Workshop #002 · still no experience needed

Saddlebags
and the Ridewhen a chatbot starts doing a job

A horse that talks is useful. A horse that can open the gate, fetch the price list and carry the result back is a different animal — and it is the same horse.

By the end of today you will know which of your weekly jobs are worth handing over, what has to be true before you hand one over, and you will have picked the first one.

Presented by Emile du Toit
brainitconsulting.com

If you missed the first session

You can follow all of today without it. Here is an overview of last time in five lines.

  • The horse is the model — ChatGPT, Claude, and the rest. It reads what is in front of it and works out what should come next, one word at a time. That is all the trick amounts to.
  • The bridle and reins are the chat box. You steer with words, and a vague instruction gets you a wandering horse.
  • The saddle is your standing instructions — who you are, what you always do, and what it must never do — written once so every conversation starts properly.
  • It bolts sometimes. It will state a wrong thing as confidently as a right one, and it does not know what day it is.
  • You stay on. Nothing has happened yet that a person did not approve.

Everything so far has been a horse that talks. Today we put it to work.

Contents

  1. What's in the saddlebagsTools: how it reaches the real world.
  2. From a trick to a rideThe agentic loop, step by step.
  3. When a mistake repeatsThe failure that only appears once it can act.
  4. A day's workThree small-business jobs, fully harnessed.
  5. Your first rideAn eight-step checklist for Monday morning.

Then the questions this session always raises, the glossary so far, and the picture to photograph before you go.

01

What's in the saddlebags

A saddled horse still can't open the gate. Tools are how it reaches the real world.

Up to now everything the model produces is words on a screen. You still copy them somewhere. Tools change that. A tool is a specific thing the model is allowed to reach for — like handing your rider a set of keys, a price list and the mail.

Typical saddlebags for a small business:

Read the inbox See what came in overnight Look something up Prices, stock, a customer record Search the web Today's facts, not last year's Write a row Spreadsheet, invoice, CRM Send a message Email, SMS, or a draft to approve Book a slot Calendar, technician, truck The model decides which bag to open. The bag does the work — and every opening of it can be logged.
Fig. 4 — Tool use. Note the split: the model chooses and fills in; the tool performs. That's what makes it checkable.

That split matters more than it looks. The model doesn't secretly reach into your bank. It says, in effect, "I would like to use the send-email tool, addressed to this person, with this text." Software you control then decides whether that happens — straight away, or only after you press approve.

A word you'll hear: MCP

Model Context Protocol. It's an agreed standard for handing a model a set of tools, so your accounting software and your AI assistant can be introduced once and get on with it. You don't need to understand the plumbing. You only need to know that connecting an assistant to your existing systems is now a normal, boring thing to do.

02

From a trick to a ride

One instruction, one answer, is a trick. Real work is a loop.

Ask a question, get an answer, done — that is a horse doing one trick. Watch a working horse cut a calf out of a herd and you see something else entirely: it looks, it moves, it checks what happened, it adjusts, and it keeps going until the job is finished.

That is the agentic loop, and that is what people mean by an AI agent. Not a robot. A loop.

1 · Look What's the situation now? 2 · Decide Which tool, what input 3 · Act Open the bag. Do the thing. 4 · Check Did that work? The goal set by you — and where to stop
Fig. 5 — Round and round until the goal is met or the boundary is hit. You set both.

The same loop, in a real yard

Goal: "Follow up on every invoice more than 14 days past due."

  1. Look. Opens the accounts tool. Finds eleven overdue invoices.
  2. Decide. Notices two are from the same customer — those should be one letter, not two.
  3. Act. Drafts ten reminders, each with the right amount, date and job reference.
  4. Check. One customer has no email address on file. It can't send that one.
  5. Round again. Puts that one on a short list for you, marked "needs a phone call", and finishes the other nine.
  6. Stop. Leaves nine drafts in your outbox for approval, and a note about the tenth.

Nothing in there is clever. It is what a good office assistant does. The difference is that it happens at seven in the morning and takes forty seconds.

The whole rig

Instructions the saddle — fitted once Tools the saddlebags — it can act Your grip the goal and the limits The model words in, words out
Fig. 6 — Model, instructions, tools, loop, rider. Every AI product you will be sold is some arrangement of these five.
03

When a mistake repeats

The one kind of failure that only shows up once it can act.

Last session covered the ways a talking horse goes wrong: it makes things up, it goes where it thinks you meant, and it has no idea what today is. All of those are still true and none of them have got worse. But giving it saddlebags adds one more, and it is the one worth taking seriously.

It does the wrong thing quickly, and repeatedly. A loop with tools attached amplifies whatever you gave it. When it could only talk, a bad instruction produced one bad paragraph that you read and threw away. When it can act, the same bad instruction produces two hundred emails, and you find out afterwards.

Nothing about the horse has changed. What has changed is that a mistake now leaves the yard.

Rules of the barn
  • Start in the paddock. Test on copied data, not the live system.
  • Check the girth before every ride. Anything that spends money, leaves the building, or cannot be undone gets a human approval step. Keep it that way until you're bored of approving.
  • Keep a hand on the reins. Drafts for you to send beat messages sent for you.
  • Keep a log. Every tool it used, every time. If you can't see what it did, you can't trust it.
  • Don't hand it the deeds. Deleting records, changing bank details, publishing to the world — those stay with a person.

Those five are not a beginner's training wheels to be discarded later. Businesses running this properly still work that way, because the rules cost almost nothing and the alternative costs a customer.

The question is never "can I trust it?" It is "what happens if it's wrong here, and can I undo that?"

04

A day's work

Three ordinary jobs, harnessed the same way each time.

The pattern never changes. Something arrives or some hour comes round; standing instructions say what to make of it; tools fetch what's needed and put the result somewhere; a person checks the end of it. Read the table across, one row at a time.

The job Saddle (standing instructions) Saddlebags (tools) Who checks
Turn inquiry emails into estimates Rate card, sales tax rule, tone, the jobs we don't take Read inbox · read price list · create draft estimate You approve every estimate before it goes
Monday morning numbers Which figures matter, what "unusual" means for us Read accounts · read bookings · write a one-page note Nobody — it only writes a summary for you to read
Answering the same five questions The approved answers, in our words, and when to escalate Read inbox · search our FAQ · draft a reply You send. After a month of good drafts, reconsider

Where it earns its oats

What not to hand it first

05

Your first ride

Eight steps. Nobody starts by galloping.

You do not need to buy anything, hire anyone, or understand a single acronym to start. Here is the order that works.

  1. Pick one task you do every week that is mostly reading and writing, and that annoys you.
  2. Write down how you do it now — in steps, the way you'd teach a new employee on their first morning.
  3. Do it by hand in a chat window, three times. No automation. Paste in a real example, ask for the result, correct it. Notice what you keep having to explain.
  4. Turn what you kept explaining into a saddle. Write those standing instructions down in a note, then save them somewhere the chatbot reads automatically, so you stop retyping them. Session one showed you where that setting lives.
  5. Use it manually for two weeks. If it isn't saving you time as a copy-and-paste job, tools won't save it either.
  6. Only now ask what tools it needs. Usually one or two. This is the point to bring in someone technical, and you'll brief them well because you did steps 1–5.
  7. Keep a person on the last step for the first month. Approve, don't automate.
  8. Then take the second task. Not before.
Before you leave today

Write down one weekly task — on paper, on your phone, anywhere. That is all the homework there is. Everything in this book is easier once there's a real job in front of it.

06

Questions people actually ask

The ones this session always raises.

Can it look at my spreadsheets, my email, my invoicing system?

Only what you put in its saddlebags.

Out of the box it sees nothing but what you paste in. You can upload a file to a conversation, and you can connect it to systems properly with tools — which is what this whole session is about. Nothing connects itself. If you didn't set it up or approve it, it isn't there.

Is it going to replace my staff?

A horse didn't remove the need for someone who knows the way.

In a business your size, it takes over tasks, not people — the reading, the drafting, the sorting, the retyping. What it cannot do is know when the answer is wrong, and that judgment sits with the person who understands the work. Most owners I meet don't end up with fewer people. They end up with people spending their day on the part that needed a person.

How do I know it actually did what it says it did?

You can see every gate it went through.

Because the model asks for a tool and software you control performs it, every single action leaves a record — which file, when, what it wrote. That is the practical difference between an assistant and a black box, and it is why the "keep a log" rule is worth having from day one. If someone offers you an automation you cannot inspect afterwards, that is the thing to be suspicious of, not the AI.

Everything feels automatable. Where do I actually start?

The dullest job you do every week.

Not the most valuable one, and not the most annoying one — the most repetitive one, where you would notice immediately if the answer came out wrong. Repetition means you get many goes at improving it; obvious failure means a mistake teaches you something instead of costing you something. The next chapter is the eight steps, and step one is exactly this.

What if it sends something to a customer by mistake?

It can't, unless you gave it the postbag and told it not to ask.

Sending is a tool like any other, and it is the one to keep on a short rein longest. The sensible arrangement for a first year is that it drafts and you send — you keep the two seconds of judgement and lose none of the time saving, because writing the thing was the slow part.

Plain words

Everything the series has named so far. Today's are marked.

Large language model (LLM) 001
The engine that predicts the next word. The horse.
Prompt 001
What you type. A pull on the reins.
Chatbot 001
A model you can talk to, turn by turn. Horse plus bridle.
System prompt / instructions 001
Standing orders sent with every message. The saddle.
Context window 001
How much of the conversation it can hold at once. How far it can see on this ride.
Token 001
A chunk of a word — how length is counted and how you're billed. Sugar cubes.
Hallucination 001
Making something up and sounding certain. Shying at a shed snakeskin.
Knowledge cutoff 001
The date its training stopped. The last day it was out in the world.
Tool 002
A specific action it's allowed to take in the real world. A saddlebag.
MCP 002
An agreed standard for plugging tools into a model. Standard-size buckles.
Agent 002
A model given a goal, tools, and permission to keep going. A working horse, not a show pony.
Agentic loop 002
Look, decide, act, check, repeat. The ride itself.
Human in the loop 002
A person approves before something real happens. A hand on the reins.
Automation 002
The same work happening without you starting it each time. The horse knows the route.

Everything on one page

Photograph this before you go.

1 · The model

Predicts the next word. Knows a lot. Knows nothing about you.

2 · The chatbot

Add reins and you can steer it. Where everyone starts.

3 · The harness

Standing instructions, fitted once. Every ride starts right.

4 · The agent

Tools in the bags, a goal, and a loop. Now it does a job.

And the rider stays on. You set the goal, you set the boundary, you check the end of it. That doesn't get automated — it's the part that was always yours.

Next session

#003 — Why Leave the Field

Everything so far has happened in a browser tab, which means you have been the one carrying every fact out to the horse and every answer back. Next time we find the building where your actual files live, and why professionals do not work in a chat window. Nothing to install before you come — lids stay down.

Bring the task you picked today. We will use a real one from the room.

Want someone to hold the reins with you?

I do this for a living, and love to help people.

Thirty-plus years in enterprise software and a computer science degree — which mostly means I have watched a great many horses bolt, and I can usually tell you which ones are worth saddling before you spend money on the saddle.

01

In person

Your team, your room, your actual work on the whiteboard instead of somebody else's examples.

02

Over video

The same session, at your desks, with fewer chairs to stack afterwards.

03

Built for real

When the idea survives the workshop and somebody has to go and build the thing — that part I do too.

Fun fact — I rode to school on horseback as a kid in South Africa. So the metaphor isn't borrowed. I've done the falling off in person.

Emile du Toit brainitconsulting.com

Workshop #002 · Saddlebags and the Ride
© 2026 Emile du Toit, BrainIT Consulting
Print it, download it, share it with your team. Just leave my name on it.