What the agent does and does not do

Out of the box

• Word, PDF and Excel documents: read, compare versions, build a summary table, draft a letter or a report. A large result is saved as a file in your folder, not pasted into the chat.
• Make sense of what you send it: a screenshot, an export, a log, a contract.
• Keep context: what was decided yesterday, where the data lives, what broke last time. A new conversation picks up from there.
• Schedules: remind, check, have a report ready by morning (arranged with the environment administrator).
• Take a contested decision to several models from different companies, independently of each other (the council).

Connections

E-mail, calendar, Teams, Google Workspace, Microsoft 365 and your company's systems are connected separately and only with your consent: the "Connections" page in the environment, or your administrator. Until a connection exists the agent works with what you send it. E-mails on your behalf are prepared as drafts and sent only after your explicit "send".

The safety catch

The agent works only with what your account is allowed to reach, and nothing more. Three rules that always apply:

1. Reading, searching, analysis, drafts - it does on its own.
2. Anything irreversible or visible to other people (delete, send, restart, change settings) - only after your "Yes" to the specific action in the chat.
3. Other people's things - never: other people's and companies' data, the platform infrastructure, systems you have no rights to.

These rules are set by the platform, not by the model: the agent cannot switch them off or work around them, and an attempt is logged.

Credentials

Logins, passwords, API keys - do not type them into the chat "into the air". Tell the agent "save my login and password for system X" and it puts them into your personal vault, tells you where, and uses them from there. The agent never repeats a password in replies or files. Chats, files and e-mail are no place for passwords.

What it does not do

• It does not reach systems directly: every action goes through the platform core and leaves a record.
• It does not act on anyone else's behalf and does not see other environments.
• It does not administer the platform: servers, network, client-area accounts are handled by sysadmins.club.
• It is not responsible for what it was not given: no e-mail connection means it does not read e-mail.