AIEUSHow bots act
What starts a reply, as whom, and who can see what it did?
Partial: A bot reply starts from a request, not from its instructions, and runs on Anthropic's Claude with the permissions of its asker or of the account a schedule names, pausing for approval before some sensitive actions. Keep in mind: Scheduled work depends on how each installation is set up and is not yet proven end to end in a live installation. Each scheduled reply stops within five minutes, and one that reaches an action needing approval ends with an error instead of waiting. Outside services an administrator links to a bot use the login stored for that connection and never pause.
Partial: A bot is a named AI assistant that lives in your module (a self-contained space in AIEUS with its own files and people). You talk to it in Messages, the built-in chat, one-to-one or alongside other people in a shared channel. Keep in mind: In a shared channel, a bot replies only when someone mentions it by name with @ and it is a member there. No bot's reply sets off another bot automatically. However, a bot allowed to take actions can ask another bot while answering. Shared channels may not be live on every installation yet.
Anyone with an account in the module can rename a bot, change its picture or rewrite its instructions, unless an administrator restricts this. Only a bot's creator or an administrator can archive it. Archiving hides the bot but keeps its history. Keep in mind: Because editing is open by default, read a shared bot's instructions before trusting it with actions that change things. Bots cannot be deleted, only archived and restored. You can stop only your own reply. Archiving a bot stops everyone's replies.
Nothing written in a bot's instructions gives it extra access or lets it start working on its own. Every reply begins with a request, such as your message or a schedule someone deliberately set up. Keep in mind: A bot may set up a schedule only when the request asks for one and the account it acts for is allowed to create schedules. While answering, it can ask another bot for help, under the same permissions.
When a bot answers you, it acts with your own permissions in the module. It can read and change what you could, including your private files. It cannot reach anything there you are not allowed to reach. Keep in mind: When it answers an administrator, it has administrator reach. Outside services an administrator connects to a bot run under that connection's own login instead. By default, only an administrator may use them. Each call is logged first.
Some sensitive actions pause the bot's reply to ask you first. Examples include deleting files, changing how data is structured and managing stored secrets. You choose Allow (this once), Always allow (from now on) or Deny. Deny stops the reply. Keep in mind: Approving never adds a permission you lack. Always allow covers only you and that kind of action. No screen yet reviews or undoes an Always allow choice. Outside services an administrator connected never pause. If you work from your own AI app, its prompts apply instead.
Partial: Everyone in a conversation, plus the module's administrators, can read what is said. Approval requests and results of actions a bot takes for you stay private to you and administrators, unless the bot quotes those results in its reply. Keep in mind: Anything a bot quotes from your private files appears in its reply for everyone in the conversation, so choose the audience first. In a channel, the bot also reads others' messages. Administrators can also review conversations they are not part of, in a read-only view. Shared conversations may not be live on every installation yet. Older bot chats stay visible only to the sender and administrators.
Partial: AIEUS also includes a way for a bot to work while you are away. Someone allowed to create schedules sets up a one-time or repeating schedule. The schedule asks the bot to act under a chosen account's permissions. Keep in mind: This has not yet been proven end to end in a live installation. Confirm the setup, account, permissions and oversight before relying on it. Each scheduled reply stops within five minutes. By default, it cannot use outside services an administrator connected.