← All posts

One thread, one task: locking down who can manage your scheduled tasks

One thread, one task: locking down who can manage your scheduled tasks

Email threads are loose by design. You CC ten people, forward to a fresh person, reply-all, BCC. The thread is whoever happens to be on it at the moment. That works fine for human conversations. It got messy the day we tried to layer scheduled tasks on top.

You set up a daily brief like this:

To: marvin@ccmarvin.com

Hi Marvin,

Send me a portfolio brief every weekday at 7am Eastern: overnight moves on my watchlist, anything in the news on my holdings, and one thing to keep an eye on.

Simple enough. The trouble starts when other people are on the thread.

Problem 1: who owns the task?

Say you CC'd a colleague on that thread for context. A week later your colleague replies: "Marvin, change the report to 6pm instead." Whose report did they just change?

The early version of Marvin treated the thread as the unit of authority. Any reply could affect any task on that thread. So a CC'd colleague could reschedule your task, pause it, or cancel it. Not maliciously, just accidentally, because Marvin had no way to know it wasn't theirs to change.

We made ownership strict and explicit. Every task belongs to the email address that created it, and only that address can list, edit, pause, resume, or cancel it. Everyone else on the thread is a bystander for task management.

When someone targets a task they don't own, Marvin declines:

From: Marvin marvin@ccmarvin.com

Hi Priya,

I can't change that one. The 7am brief is owned by the person who set it up, and only they can reschedule, pause, or cancel it. I keep task management tied to the owner's address so nothing gets changed by accident.

If you'd like your own daily brief, just email me from your address and I'll set one up for you.

Sincerely,
Marvin

The boundary is enforced in two independent places: the policy Marvin's agent reads, and a hard check before anything touches your tasks. Security boundaries that live in only one place have a way of getting quietly removed.

Problem 2: duplicate tasks on the same thread

The other recurring headache: you set up a recurring task, then reply later to refine it ("actually move it to 8am"), and end up with two active tasks on the same thread. One at 7am, one at 8am. Both fire. You unsubscribe from both in frustration.

The model was reading the refinement as "set up a new task" rather than "modify the existing one," so it created a second task and left the first running.

Now same-thread creates are smart. If the thread already has an active task, a follow-up is treated as an update, not a duplicate. The confirmation says so plainly ("the previous schedule has been replaced"). One task per thread; follow-ups refine it rather than fork it. If you genuinely want a second task on the same thread, just ask for it explicitly.

What changes for you

Three things you can now count on:

  • Task ownership is strict. It's tied to the verified address that created the task. Other people on the thread can't change your tasks, even by accident.
  • Refinements update, they don't duplicate. Reply to tweak the time or scope and you'll still have exactly one task.
  • Deliveries go only to the owner. If you set up a daily brief with three people CC'd on the original thread, the brief itself goes only to you, never to the CCs. Marvin tells you this when you create the task, so "set up a daily report for me and my team" never quietly loops in the team.

If you've been hesitant to hand a thread off to a colleague because of what they might accidentally do to your Marvin tasks: don't be. Forward freely. Your tasks are yours.

Try it

Email marvin@ccmarvin.com, set up a recurring brief, and CC a colleague on the thread. The brief still comes only to you, and your colleague can't touch it.