When an assistant acts

Will an assistant act without my say-so, or get it wrong?

An assistant acts only on a request, such as a message or a schedule that someone set up, and creates a schedule only when asked by an account allowed to. Its instructions add no access.

Anyone signed in to an assistant's space can edit its written instructions, except where an admin, someone with full authority there, has limited that, so read them before letting it alter anything.

Some sensitive steps, such as deleting files, need your yes, and saying yes adds no access you lack. 'Always allow' stops every assistant in the space from asking you about that kind of step, and no screen yet shows or clears that choice.

An assistant can read and change anything its asker can in the space, private files included, and it may create or edit files without asking first; for an admin, that means admin reach.

Outside services an admin links to an assistant use their own login, not the asker's access, never stop to ask, are logged before each use and by default serve only admins' requests, never a schedule's.

An assistant's replies come from Anthropic's Claude, and Anthropic says Claude's answers can look correct yet be badly wrong, so check anything that matters before acting on it.

Partial: Results of actions an assistant took for you are visible only to you and your admins unless it quotes them in its reply, which everyone in that conversation can read. Conversations with several people may not yet work on every installation.