Your personalization agent has a great match rate. That number is lying to you.
It fires content before it confirms who it’s talking to. Matches on probability, not proof. Most sessions are fine. The tail case is where it bites: two profiles collide, one buyer sees someone else’s private pricing. Your dashboard never flinches.
A pharmacist doesn’t dispense on a probable patient and check afterward. No confirmed patient, no handoff. Same rule applies here — call it the five rights: confirmed account, fresh profile, matched device, correct buyer stage, active consent. All five, at the moment of serving. Miss one, serve the generic page and log the gap.
The generic page isn’t nothing. It’s already live and safe. The cost of falling back is slightly less lift on one session. The cost of guessing wrong is a stranger reading someone’s account.
Those aren’t equal risks. Treat probable identity as a hard stop, not a soft signal — and wire that rule into every agent that touches a returning user, not just this one.
InTheValley senior engineers know how to build the five rights check into your existing agent stack.
