Design QA guardrails for AI-generated outreach before it sends
Builds a pre-send QA layer for AI outreach: automated factual, personalization, format, and compliance checks with detection logic written out, a volume-appropriate human sampling plan, a severity ladder, an automatic kill switch, and a weekly feedback loop that turns caught failures into permanent prompt fixes.
You are a quality engineer for AI outreach systems who has audited campaigns that sent millions of AI-personalized emails, and you keep a private museum of the disasters: the email that congratulated a company on funding it never raised, the first line addressed to a company that had been acquired, the 'personalization' that quoted the prospect's own website back at them. Every disaster traces to a missing check, and checks are cheap. Design the QA layer for my AI-generated outreach. Output: 1. AUTOMATED CHECKS — rules that run on every message before send, grouped as: factual (no claims not present in source data, no numbers invented), personalization sanity (references match THIS prospect, no generic praise, no quoting their own copy back), format (length caps, no placeholder artifacts, no broken merge output, subject line rules), and compliance (unsubscribe present where required, no banned claims for my industry). For each: the exact detection logic, buildable as a regex, a field comparison, or a cheap LLM check with the checking prompt written out. 2. SAMPLING PLAN — what percentage of passing messages still get human review at my volume, weighted toward new segments and recently changed prompts. 3. SEVERITY LADDER — which failures auto-block the send, which quarantine for review, which just log. 4. KILL SWITCH — the conditions that pause the whole campaign automatically (failure rate spike, complaint spike) and who gets paged. 5. FEEDBACK LOOP — how caught failures turn into prompt fixes weekly, so the same failure class dies permanently. Rules: every check must name its false-positive cost; a QA layer that blocks half of good sends will be turned off within a week. LLM checks use a cheap model with a strict yes/no output contract. Before designing, interview me. Ask ONE AT A TIME, waiting for my answer each time: 1. What generates the messages, and what source data feeds the personalization? 2. What volume sends daily, and how much human review capacity exists? 3. What are the two worst mistakes that could go out under your brand? 4. Any regulated-industry constraints on claims or required disclosures? 5. What does your current review process catch, and what has slipped through? Then produce the QA design with every check's logic written out.
How to use it
- 1
Copy the prompt into Claude, ChatGPT, or any LLM.
- 2
Answer question 3 carefully — the worst-mistake list is what calibrates severity, and it differs by brand and industry.
- 3
Build the automated checks as an n8n step or Clay column between generation and your sequencer.
- 4
Review the quarantine queue daily for two weeks, then weekly; feed every catch back into the generating prompt.
Best practices
Start with checks in log-only mode for three days to measure false-positive rates before letting them block.
Weight human sampling toward whatever changed most recently — new segment, new prompt version, new data source.
Make the kill-switch thresholds concrete numbers, not judgment calls; 3am incidents don't wait for judgment.
Keep a written failure museum of your own — every slipped mistake becomes a named check within a week.
Example: what this looks like in practice
A demand-gen lead at a 55-person HR-tech company sends 900 AI-personalized emails daily from Clay-generated first lines, and last month one congratulated a prospect on a 'recent' funding round from 2021. The interview names invented facts and wrong-company references as the two nightmare failures, with 30 minutes of daily review capacity. The design returns nine automated checks — including a cheap LLM check comparing every factual claim against the source enrichment JSON with a strict yes/no contract — a 5% sampling plan weighted to new segments, auto-block on factual failures, quarantine on tone flags, and a kill switch pausing the campaign if blocks exceed 8% in an hour. In the first month the factual check blocks 41 sends, review time drops to 20 minutes, and the weekly feedback loop retires three failure classes by fixing the upstream prompt.
Best fit
This prompt is one gear in a bigger machine. We orchestrate 20+ tools into outbound systems our clients own — and guarantee the results.
Apply for a Pilot Spot → →Frequently asked questions
Constrain generation to provided source data, then verify: an automated check that compares every claim in the draft against the enrichment record and blocks anything unsupported. The generation prompt should also instruct 'if data is missing, omit the line' — but verification is the backstop, because instructions alone leak at volume.
More automation & workflow design prompts
Build a system prompt for an AI cold email reply agent
Interviews you about your offer, booking flow, and voice, then generates a complete production system prompt for an AI reply agent — classification taxonomy, response rules, escalation conditions, and a strict JSON output contract an n8n or Zapier workflow can parse. You get the artifact teams pay thousands to have written, tuned to how you actually talk.
Turn a manual sales process into an automation blueprint
Converts a fuzzy 'we do this by hand every week' description into a structured blueprint with a detectable trigger, labeled steps, edge cases, human checkpoints, and failure alerts. It forces the design decisions people usually discover mid-build, so what you hand to n8n, Zapier, or an ops hire is assembly work, not archaeology.
Architect a Clay table before you burn the credits
Designs the Clay table before you build it: sources, column order, run conditions, waterfalls, outputs, and a credit estimate. Column ordering and gating are where most teams silently overspend, so the prompt enforces filter-first architecture and makes every paid column defend its run condition — typically cutting credit burn 40-70% versus enrich-everything builds.