What it will not do
Touch your account. There is no tool on the server that can change a campaign, an ad, a budget or a keyword, whatever your assistant is asked to do, and a test walks the code's import graph on every build to keep it that way. It can write one thing: a proposal on your GoodLads board, the same card the product writes for itself, with the draft filled in and the evidence attached. Deploying that card is yours alone: you open GoodLads and press the button, with the usual one-click approval and a recorded way back.
Access is your own login, through OAuth: you approve it on a GoodLads consent screen, the client holds the token, and it sees exactly the accounts you have connected and nothing else. Revoke it by removing the connector in your client.
It also costs you nothing extra. Your assistant does the reasoning and pays for its own tokens, so there is no usage limit on the endpoint and no second bill from us.