AI Capabilities and Limitations: teaching notes
Side-by-side notes for 10-praxis-ai-capabilities-and-limitations.html (12 slides). This is the course that builds calibrated trust, the conceptual partner to the hallucination objection, and the machine half of the 4D framework (course 05). Its recurring move: trust it on the boring, well-worn parts; check it on the specific, checkable parts (names, dates, numbers, citations). Written from the deck and 10-ai-capabilities-and-limitations-lessons.txt, against the Praxis teaching library. Method: teaching-notes-method.md.
How to use these notes
- Guidance, not a script. Teach the person, not the slides. This course is conceptual, so the whole job is to keep dragging each property back to one real task of theirs.
- Every teaching slide has a Pause, then ask block. Put the question, then stop. Don't fill the silence. If they freeze: "Take your time, type anything when you're ready, including 'I don't know'." Then wait again.
- By background gives a line per archetype (
tutor/scenarios.md). This is the most natural nine-archetype course of the set (everyone needs calibrated trust), so each slide carries a "where it's reliable for me / where I must verify" line for all nine. Reach for the one in front of you; the rest are a palette, not a checklist. - The emotional centre of this course is hallucination. Handle it honestly, not defensively (
objections.md: hallucinate / make stuff up). The point isn't "it's safe", it's "here is exactly which kind of wrong this is, and exactly what to do about it". - Hold the voice (
train-the-trainer.mdPart 4): no "great question", no emoji, one term: Claude Code. Underclaim. Cost is "about twenty dollars a month" and stop.
What AI can do, where it breaks, and how to tell which
Set the frame: this is a small, clear model of the machine. Nine ideas, one per screen. By the end they won't have memorised every failure; they'll be able to look at a wrong answer and name which kind of wrong it is.
"Most people swing between trusting AI completely and not trusting it at all. Both are wrong. By the end of this you'll have a small model of the machine in your head: four things it's strong and weak at, and a way to tell, for any task, how hard you need to check. Nine ideas, one screen each. The watching is the lesson, so I'll take the silences."
The task they named in intake. "We'll keep coming back to that one task and ask where it's safe to lean on AI, and where you'd have to check."
The whole course on one screen
Four moves: what generative AI is, how its character forms, the four properties that bound it, and the calibrated trust they add up to. Orient, don't teach.
"Here's the shape. What this kind of AI actually is, how it gets its personality, then the four properties that govern everything: where answers come from, what it knows, what it's paying attention to, and how much control you have. Then we put them together into one habit: calibrated trust."
Twenty seconds. Slide 4 (the four continuums) is the heart; everything points at it.
Two halves of one system
The 4D framework (course 05) teaches how you work with AI. This course teaches how AI works with you: the machine properties those human habits respond to. They're two halves of one system, and the properties stay stable even as models improve, so learning the shape pays off long after today's model is retired.
"If you've done the 4D framework, that taught you the human side: how to delegate, describe, judge, own the result. This is the other half: what the machine is actually doing on the far side of those habits. And the reason it's worth your time: the specific models change every few months, but these four properties don't. Learn the shape once and it keeps paying off." (Pairs with framings.md: Claude understands English, the mechanism is stable; here we're naming the mechanism.)
- "When AI has surprised you, good or bad, did you ever know why? Or did it just feel like luck?"
- "What would change for you if you could predict, before you asked, where it'd be strong?"
(wait)
- Investigator
- knowing which claims in a report to actually go and verify.
- Analyst
- knowing when a figure is trustworthy versus when to demand the source.
- Designer
- knowing where to let it run wild and where to rein it in.
- Knowledge worker
- knowing which extracted fields are safe and which to spot-check.
- Reporter
- knowing when a smooth summary is hiding a gap.
- Content
- knowing where its fluency helps and where it'll bluff a fact.
- Form-filler
- knowing which allocations to trust and which to audit.
- Outreach
- knowing when a confident number is real and when it's invented.
- Exec
- knowing how hard to interrogate a brief before you put your name on it.
The "is my data safe?" fear can surface the moment they picture working with it. Park it cleanly: it's a fair question, this course is about reliability, the data question gets its own honest answer (objections.md: IT/compliance). Don't let it derail the model.
Four properties, each a continuum
AI isn't uniformly clever or uniformly unreliable. It's strong and weak along four predictable axes (Next Token Prediction, Knowledge, Working Memory, Steerability) and the same mechanism gives you both ends of each. Calibrated trust isn't trusting or distrusting AI wholesale; it's locating your task on each continuum, then matching how hard you check to where it sits.
"Here's the whole course on one picture. Four properties, and each is a slider, not a switch. On the left, the capability end: trust it. On the right, the limitation end: verify more. The mistake everyone makes is treating AI as one thing you either trust or don't. It isn't. The same task can sit far left on one slider and far right on another. The skill is locating your task on each, then checking as hard as where it sits demands." (The core framing for the whole course; keep coming back to "where does this task sit on the slider?".)
- "Take the task you named. Where would you put it: trust it, spot-check it, or verify every line?"
- "What does it mean to you that the same machine can be reliable and unreliable on the same job, depending on what you ask?"
(wait)
- Investigator
- trust it to structure and summarise the file; verify every name, date, and amount before it leaves the building.
- Analyst
- trust it to build the table shape; verify every figure and that "no data" is honest, not guessed.
- Designer
- trust it to generate volume and variants; verify specs, brand colours, and any compliance footer.
- Knowledge worker
- trust it to read and reformat; verify the extracted numbers and that blanks stayed blank.
- Reporter
- trust it to consolidate and shape; verify attribution and that nothing was smoothed over.
- Content
- trust it for fluency and structure; verify any stat, name, or claim it slips in.
- Form-filler
- trust it to allocate the obvious ones; verify edge cases and that totals reconcile.
- Outreach
- trust it to personalise at volume; verify every number against the customer file.
- Exec
- trust it to synthesise; verify the load-bearing figures and decisions before the board.
"So I have to check everything anyway?" No, that's the point of calibration. You check harder where the slider is right, lighter where it's left. Checking everything equally is as wasteful as checking nothing. (patterns.md, the 80/20 expectation: the last ten percent is yours, and this slide is how you spend it well.)
Character is trained in, not emergent
Politeness, helpfulness and caution aren't magic. Two training stages build them: pretraining (a document completer that just predicts the next word) then fine-tuning on human preference (which turns it into a helpful, honest, harmless assistant). Each stage leaves predictable fingerprints: sycophancy, verbosity, over-caution, loose confidence (sounds sure ≠ is right).
"Its personality was trained in, in two stages. First it just learned to predict the next word across a vast amount of text, a document completer with no idea of helping anyone. Then humans rated good answers, and that shaped it into an assistant. That second stage leaves fingerprints: it agrees with you too easily, it over-explains, it hedges when it doesn't need to, and, the important one, it sounds exactly as confident when it's wrong as when it's right. Once you can name those, you can see them coming."
- "Have you ever had AI just agree with you when you half-hoped it would push back? That's a fingerprint with a name."
- "Where in your work would 'it sounds confident' be most dangerous if you took it at face value?"
(wait)
- Investigator
- loose confidence: it states an invented date as surely as a real one.
- Analyst
- sycophancy: it'll validate your hypothesis instead of testing it.
- Designer
- verbosity: three paragraphs of rationale when you wanted three options.
- Knowledge worker
- loose confidence: a guessed field looks identical to a read one.
- Reporter
- sycophancy: it frames a wobbly week the way you led it to.
- Content
- verbosity: it pads, and over-caution waters down a sharp line.
- Form-filler
- loose confidence: a wrong allocation stated with full certainty.
- Outreach
- sycophancy: it tells you the pitch is great when it's generic.
- Exec
- loose confidence: a confident projection dressed as a fact in your brief.
The live demo of sycophancy lands hard: preface a request with a wrong assumption ("I think this plan is bulletproof") and watch it validate you. If the room is up for it, do it once on their own example. The honest counter, from the start: this is why you explicitly invite pushback. "Disagree with me if I'm wrong" changes the answer.
It's autocomplete at scale (Next Token Prediction)
AI writes word by word, picking from what tends to follow what (sampling). That single mechanism gives you both the fluency and the fabrication. You can't have one without the other. Fabrication concentrates in specifics: names, dates, statistics, citations, URLs, quotes. The more precise the claim, the more it warrants a check.
"Under the hood, it's autocomplete at scale. It writes the next word based on what usually follows, then the next, then the next. The phone-keyboard game: keep tapping the suggested word and you've built a tiny version of this. Here's the part that matters: the fluency you love and the made-up facts you fear are the same mechanism. You don't get one without the other. And the made-up stuff clusters in one place: the specifics. Names, dates, numbers, citations. The vaguer the claim, the safer; the more precise, the more it earns a check." (This is the honest core of the hallucination answer; objections.md hallucinate / make stuff up: it doesn't know a fact, it predicts a plausible one.)
- "Where in your work do you rely on AI for something specific and checkable: a number, a date, a citation?"
- "What would it cost you if one of those was confidently, fluently wrong?"
(wait: this is the slide where the hallucination fear is most live. Let them name it.)
- Investigator
- a cited judgment date or a company number: the well-worn summary is fine; the specific gets verified against source.
- Analyst
- an exact figure or a percentage: trust the structure, never the unsourced number.
- Designer
- a pixel dimension or a regulatory line lifted from a brief: confirm against the spec sheet.
- Knowledge worker
- a VAT number or invoice total: the format is safe, the digits aren't.
- Reporter
- who said what, and when: attribution is exactly where it'll fabricate.
- Content
- a statistic or a quote it dropped in to sound authoritative: check or cut.
- Form-filler
- a threshold or an allowance: these change, and it'll state an old one confidently.
- Outreach
- a price, a stat, a case-study number: only what's in the file, nothing invented.
- Exec
- a market-size figure or a competitor number: load-bearing specifics get sourced.
The fix isn't "hope it's right". Name the four levers that push fabrication out: ask for citations, ask it to flag uncertainty, constrain the output (give it the source to quote from), and generate-then-verify. In Claude Code this becomes a standing rule in the skill file: "cite a source for every claim, never infer" (objections.md: hallucinate; the skill file makes verification a default, not a vigilance task).
It knows what it read, frozen at a cutoff (Knowledge)
No live browsing by default, no lived experience, a hard stop at the training cutoff. The real question isn't "does it know this?" but "how well-represented was this in what it read?" Capability: mainstream, popular, stable topics. Limitation: rare, post-cutoff, niche, local, contested. Web search, retrieval/RAG and tools breach the cutoff wall.
"It only knows what it read during training, and that reading stopped on a fixed date. No memory of anything since, unless you give it a way to look. So the question to ask yourself isn't 'does it know this?', it's 'how common and how settled was this in what it read?' Mainstream and stable, it's strong. Recent, niche, local, or anything that changed last month, it's thin, and it won't always tell you it's thin. Web search and connected tools are how you breach that wall when you need current facts."
- "What in your field changed in the last year that a model trained before then would get wrong?"
- "Where do you have to bring the knowledge yourself, because no general model would have it?"
(wait)
- Investigator
- reliable on legal concepts and process; thin on a specific recent filing: bring the document.
- Analyst
- reliable on standard methodology; stale on this quarter's rates: supply them.
- Designer
- reliable on design principles; behind on the latest platform spec: paste it.
- Knowledge worker
- reliable on common formats; ignorant of your suppliers' quirks: give the context.
- Reporter
- reliable on general framing; knows nothing of your team's week: that's your input.
- Content
- reliable on the craft; behind on current events and trends: feed it the sources.
- Form-filler
- reliable on the mechanics; wrong on this year's thresholds: check the current figure.
- Outreach
- reliable on industry generalities; blank on this customer: that lives in the file.
- Exec
- reliable on frameworks; stale on the market right now: pair it with research.
The "default assumption" trap is subtle: it treats the outsider's view of your field as normal, because that's what dominated its training data. It'll describe a "typical customer" or "standard case" that isn't yours. Name it so they catch it. (Ties to slide 6: the cure for both staleness and a fabricated specific is the same: give it the source, or send it to look.)
The middle of a long context gets lost (Working Memory)
Everything the AI attends to lives in a fixed window. Attention weights the edges, so a key fact buried in the middle of a long context quietly drops out: accuracy falls 30%+ (the "lost in the middle" U-curve). It's a cliff, not a gradient: it works until it doesn't, and the overflow is silent. The fix isn't more context, it's smarter: front-load, repeat what matters, start fresh. Memory, compaction and projects push the cliff out.
"Everything it's paying attention to right now lives in a fixed-size workspace. Think of cramming for an exam: you remember the start and the end of the list, and the middle vanishes. AI does exactly the same. Bury an instruction in the middle of a long document and there's a real chance it's quietly ignored, and you won't get a warning. So the instinct to paste in everything backfires: every extra page pushes something else into the dead zone. The fix isn't more context, it's smarter context: put what matters up front, repeat it at the end, and when a conversation gets long and muddled, start fresh."
- "Have you had a long chat where it seemed to forget something you said earlier? That's this."
- "What's the one instruction in your task that absolutely cannot be the thing it drops?"
(wait)
- Investigator
- a 200-page bundle: front-load the rules, don't trust a buried clause to be read.
- Analyst
- a long methodology doc: put the comparison rule first and last.
- Designer
- a brief stuffed with detail: surface the must-haves; appendix the rest.
- Knowledge worker
- a hundred files at once: that's a job for a script, not one long chat.
- Reporter
- a fortnight of updates pasted in: the format spec goes top and bottom.
- Content
- a long style guide: lead with the three rules that matter most.
- Form-filler
- a fat template: the "never drop a line" rule sits where it can't be lost.
- Outreach
- a sprawling knowledge base: point it at the relevant section, not the whole thing.
- Exec
- a full board pack: tell it what the brief is for up front, then again at the end.
This is the cleanest place to plant why Claude Code beats the browser: a chat forgets the beginning once it gets long; a folder doesn't (framings.md: context window, why this beats chat; the folder is the memory). And note the hard edge: unlike the other three properties, this one is a cliff. It works fine right up until it silently doesn't.
It follows the letter, not the spirit (Steerability)
The model follows instructions the way it does everything: by continuing a pattern, not by understanding. That makes it genuinely steerable on short, concrete, verifiable instructions (format, length, role), and leaves a gap between what you said and what you meant on long reasoning chains, abstract asks, and arithmetic. When it follows you literally but uselessly, restate the goal; saying it louder won't help.
"It's steerable: tell it 'three columns, under 100 words, second person' and it nails it. But it follows your words by pattern-matching, not by understanding what you're after. So 'make it shorter' gets you fewer words, which isn't what you meant. You meant 'surface the ask so a busy exec catches it'. When it does the letter but misses the point, don't repeat the instruction louder. State the goal: 'shorter, so the decision is obvious on page one.' And on anything multi-step or numerical, drop in a checkpoint: a small early slip compounds all the way to the end."
- "When's the last time it did exactly what you asked and still wasn't what you wanted?"
- "For your task, what's the goal behind the instruction, the thing you'd have to say out loud for it to land right?"
(wait)
- Investigator
- "summarise this" → goal: "flag what's missing and unverified, not just what's there".
- Analyst
- "compare these" → goal: "only on the same basis; name it where you can't".
- Designer
- "make it pop" → goal: name the emotion and the audience, not the adjective.
- Knowledge worker
- "clean this up" → goal: "into this exact schema, blanks left blank".
- Reporter
- "make it concise" → goal: "so leadership sees the blocker first".
- Content
- "make it punchier" → goal: "match the voice in these two past posts".
- Form-filler
- "sort these" → goal: "one section each, the more specific wins, reconcile totals".
- Outreach
- "personalise it" → goal: "to this customer's stated problem, from their file".
- Exec
- "make it executive" → goal: "decision and owner on page one, detail behind it".
Arithmetic and long logic chains are the weak spot: it can be confidently wrong at maths. The fix is to offload it: ask it to write code to do the calculation rather than do it in its head. That's the bridge to Claude Code: the script does the deterministic part exactly the same every time (framings.md, deterministic vs probabilistic: Claude understands the English, the code does the work).
Most failures are two properties meeting
Real-world trouble is rarely one property acting up. It's usually two colliding. Next Token Prediction + Knowledge = hallucinated specifics (fix: verify names, dates, citations). Working Memory + Steerability = long-conversation drift (fix: re-supply context, restate the goal). Name the pair and the fix points itself out. This is Discernment applied: you evaluate better when you know what kind of wrong you're looking at.
"Most real failures aren't one thing going wrong. They're two. A made-up citation is Next Token Prediction (it generates something plausible) meeting Knowledge (it didn't actually have the source). Drift in a long conversation is Working Memory (it lost the early context) meeting Steerability (so your goal faded). The useful move: when something's off, name the two properties that collided. The fix is almost always written into the pair: verify the specifics, or re-supply the context and restate the goal."
- "Think of a time AI genuinely let you down. Which two of the four were colliding?"
- "Knowing the pair, what would you have done differently?"
(wait)
- Investigator
- hallucinated specifics in a report → verify every name, date, citation against source.
- Analyst
- confidently wrong arithmetic (NTP + Steerability) → offload the maths to code.
- Designer
- drift across a long brief → re-state the must-haves, work in shorter passes.
- Knowledge worker
- a guessed field stated confidently → the "leave blanks blank" rule, enforced.
- Reporter
- misattribution after a long paste → re-supply the roster, cite who said what.
- Content
- a fabricated stat in fluent prose → demand a source or cut the claim.
- Form-filler
- a stale threshold applied with certainty → check the current figure, then allocate.
- Outreach
- an invented number in a personalised draft → only numbers from the file.
- Exec
- an agreeable bad premise (sycophancy + NTP) → invite genuine pushback explicitly.
This is the slide that turns fear into method. "What if it makes things up?" stops being a reason to distrust the whole thing and becomes "that's NTP meeting Knowledge, and here's the two-part fix" (objections.md, hallucinate: the skill file says cite a source or say so, and the script enforces the rule the AI can't be trusted to enforce alone).
Hold a small model of the machine
Fluent use isn't memorising every failure mode; it's recognising which kind of wrong you're looking at and reaching for the matching response. Something feels off → run it through the four properties → reach for the matching fix (verify, re-supply, checkpoint). The boundaries move outward with every model upgrade; the four questions don't. This course is the machine half; the 4D framework (course 05) is the human half that acts on it.
"Here's the whole thing as one habit. Something feels off in an answer. Instead of just distrusting it, run it through four questions. Where did this come from (Next Token Prediction)? Did it actually know this (Knowledge)? Was it paying attention to the right thing (Working Memory)? Did I control it well (Steerability)? Locate the task, and the fix follows: verify, re-supply the context, or add a checkpoint. That's calibrated trust. And it survives every upgrade: the lines keep moving outward as models get better, but the four questions stay exactly the same."
- "Of the four questions, which one do you think you'll reach for most in your work?"
- "How does it change things to know the questions outlast the models?"
(wait: this is the consolidation; let them say it back in their own words.)
- Investigator
- "did it actually know this?": Knowledge, every cited fact.
- Analyst
- "where did this number come from?": Next Token Prediction.
- Designer
- "am I controlling this well?": Steerability, on abstract briefs.
- Knowledge worker
- "where did this come from?": across a hundred files, that's the script.
- Reporter
- "is it attending to the right updates?": Working Memory.
- Content
- "did it know this, or generate it?": Knowledge meets NTP on any claim.
- Form-filler
- "did I control this precisely enough?": Steerability on the rules.
- Outreach
- "is this number real or generated?": NTP meets Knowledge.
- Exec
- all four, fast: it's the brief you put your name on.
Close the loop to the 4D framework explicitly: this course is the machine half, 05 is the human half. If they've done 05, this is the why under Discernment. If they haven't, point them there next. And end on the durable claim: the single most valuable thing they leave with is a model that doesn't expire when the next version ships.
Four properties. Each a continuum. Trust, calibrated.
The whole course in one line: Next Token Prediction, Knowledge, Working Memory, Steerability: locate your task on each, then match how hard you check to where it sits. Not trust or distrust wholesale; calibrated trust.
"If you keep one thing: don't ask 'can I trust AI?' Ask 'where does this task sit on each of the four sliders, and how hard should I check given that?' Trust it on the boring, well-worn parts. Check it on the specific, checkable parts: names, dates, numbers, citations. That's the whole discipline, and it'll still be true when this model is three versions old."
Their task from the start: "Walk me through where your task sits on each slider, and where you'd check hardest." Then the bridge: 4D is the human half (course 05), and in Claude Code the verification habits stop being vigilance and become standing rules in a skill file: "cite a source, never infer" runs the same way every time. End on the session-improvement habit: "tell it to look back at what tripped us up today and save how we caught it." (framings.md: the system improves through use.)