Lumi can act, not just answer
A second brain that only retrieves is a search engine with better manners. Actions are where tentus starts doing things on your behalf — carefully.
Lumi's first job was retrieval: hold what you've captured, answer honestly, cite what it's drawing from. That's the trust foundation, and it doesn't go away. But a second brain that only ever tells you things eventually hits a ceiling — at some point you want it to actually do the thing, not just remind you it needs doing.
The line we drew
Actions are real: post to Slack, create a calendar event, file a Linear issue, send an email, add a task. Every one of them requires an explicit click to confirm before anything happens outside tentus. No action fires from a chat message alone, no matter how clearly you asked for it. That confirm step isn't friction we haven't gotten around to removing — it's the actual safety boundary. A thinking tool that quietly sends emails on your behalf without a checkpoint is not a tool we'd trust either.
Compound actions
The more interesting case is a request with more than one step — "summarize this week's sales meeting into a doc and send it to Slack" is two actions chained together, not one. Lumi can now run a bounded sequence of steps, executing the safe ones (creating a note is reversible and low-stakes, so it runs immediately) and pausing for confirmation the moment it hits something external and consequential. You get one confirm click for the part that actually leaves tentus, not one per sub-step.
Acting and remembering are the same loop
The part we hadn't built until recently: what happens to the result. An action that posts to Slack or files a Linear issue used to just... happen, with no trace left behind in your workspace. Now the result of an external action gets written back as a source — the same object a note or a captured meeting transcript becomes. Acting and remembering close the loop instead of being two separate, disconnected halves of the product.
What Lumi still won't do
Nothing fires without your explicit confirmation. Nothing acts on a hunch. And the list of what Lumi can even attempt is a hand-vetted allowlist, not "whatever the model decides makes sense" — every connector on that list was added deliberately, with a real, working integration behind it. Capability without a leash isn't a feature. It's a liability wearing a feature's clothes.