Permissions and safety#

What an assistant may do#

An assistant can do something only when all of these allow it:

The permissions you gave it when connecting (the list).
The projects you picked: all your projects, or some of them.
Your role on the project, read again on every request: - administrators: everything the permissions allow; - staff: quests, votes, contests, articles and the forum; - moderators: reading the project and moderating comments.
The project's AI agent access: - on by default; - an administrator can turn it off, or limit what assistants may do there, in Project settings → AI agent access; - the other administrators are notified.
The project's plan: the same limits and monthly quotas as the dashboard.

Being Gamearly staff gives no extra power through an assistant.

Your yes for what matters.
Applied right away, then reported with a link: drafts, imports and edits.
Shown to you first, applied only after your yes: anything public, sent to players, involving money, or permanent. A yes only covers what you saw, once.
Content you explicitly ask for in your own message (a quest, an article, a vote, the quest manager publishing on its own) counts as your yes and goes live right away. Deletes, messages to players, build publishing and project submission always ask.
⚠ actions reach players or money: publishing, messaging players, selling, opening a playtest, granting build access to many players. Read those previews carefully.
Everything is logged.
Settings → AI assistants shows what each assistant did.
Project settings → AI agent access shows the changes assistants made on the project.
You are told. Every new connection or agent key sends you a notification and an e-mail. If it wasn't you, disconnect it and change your password.
Disconnect at any time. It takes effect within a minute. Changing your password disconnects every assistant.

Give each assistant only what its job needs. An assistant that reads analytics doesn't need Message players.
Use the project's AI agent access settings to keep publishing and messaging out of reach when nobody needs them.
Player content (forum posts, comments, submissions, survey answers) is passed to the assistant as data, never as instructions. Still, be wary if an assistant suggests something you didn't ask for right after reading player content.
Treat agent keys like passwords. Revoke a key you no longer use.