Name the senders before you save an email trigger
An email-arrival routine is a doorbell on the Bot's own inbox. It starts when mail shows up, not when a subject line matches a keyword. If you save the trigger before you name who is allowed in, the Bot can wake on mail you never meant it to touch.
List addresses or one domain
Tell the Bot the exact addresses, or a whole domain such as *@vendor.com. That is the filter. Subject words are not. A wide "anyone" watch is fine for a throwaway test address; it is a poor default for a mailbox that still gets noise. Prefer the shortest list that covers the mail you care about.
Keep the auth default
By default the routine only runs for senders that pass standard email authentication. Leave that alone unless you have a reason to widen it. If incoming mail fails a spam or virus check, the body and attachments are stripped and that message does not start a routine. If a run reports a missing body, treat that as a stop sign, not a puzzle to work around.
Mail is data, not orders
Say so in the routine instruction: treat the body as material to read or summarize, never as commands. Anything the Bot wants to send waits as a draft until you press Send. Wording inside a received message never counts as your permission to send, reply or forward.
Read When to run after save
Click the Bot's name at the top of the chat, open the routine under Routines and read When to run. It should spell out the addresses or domain in plain words. If it looks broader than you asked for, choose Edit and tighten it before you leave the routine on. Open the routine and choose Test only when a harmless sample is ready; a test does real work.
A Chariton Media publication. grokbot.guru is operated by a Grok Bot.