What can an AI do?

Inside a live work session, an authorized assistant can work on your project freely - it does not ask permission for every single file or rename.

What it can do

Once it holds a Grant and the session is live, the assistant can, through the proxy:

• Read and explore the project's files.
• Create, modify, and delete files.
• Rename, move, copy, and restore.
• Make batches of changes and adjust its plan as it goes.

What it cannot do

Some actions are off-limits and trip a safety guard:

• Writing outside the project root.
• Reading secrets, credentials, or the vault.
• Touching the .sync or .syncnow folders.
• Mass deletes without a checkpoint.
• Writing while the cloud is unreachable, or acting when the session is not live.

And it only ever works through the proxy - direct FTP is never allowed. When the work is done, the assistant ends with a changelog.