"Pippa supplies alternatives, evidence, and uncertainty. Dad chooses the route."
Counsel, Not Command
A consultation-first product could easily slide into an autopilot: you talk, and the AI just decides. Waystone refuses that slide with a single principle — agency stays with Dad. Pippa's job is to supply alternatives, evidence, uncertainty, and counsel; Dad's job is to choose. This is not politeness; it is a structural commitment that shows up in the data model as a hard separation between two objects that lazy software collapses into one.
A Recommendation Is Not a Decision
A recommendation preserves Pippa's alternatives, the evidence behind them, her confidence, and her uncertainty. A decision preserves what Dad actually chose, why, and what happened as a result. Collapse those into one field — the way most apps store "the plan" — and you permanently lose the ability to ask the most interesting retrospective questions: When Pippa recommended staying longer in one base, did Dad take it? When he didn't, was he right? You can only compare advice against outcome if advice and outcome were never merged in the first place.
Memory You Can Challenge
Waystone stores several kinds of travel memory and keeps their epistemic status explicit: a fact (Dad visited Switzerland three times) is directly supported; a preference (fewer hotel changes) may be explicit or inferred, so it stores provenance; a hypothesis (Dad may prefer long mountain stays to urban hopping) is never presented as fact and keeps confidence and correction controls. The rule underneath all of them: travel memory is not a hidden personalization profile that quietly hardens into truth. Dad must be able to inspect, correct, confirm, or retire any inference. An AI that remembers you but won't let you challenge what it remembers has taken agency, not supported it.