Assistants wired to "answer anything" connect to ledger, payroll, and ID numbers. One prompt leak is an internal-control incident. Agents should get task-minimal data: aggregates, masked fields, time bounds. Finance and HR detail default hidden—approval and audit when needed. Capability is not more connections—it is more precise questions safely.
Default full detail hands company secrets to every conversation. Conversations get forwarded; details do not return.
Block Detail Before Opening Questions
Roles define ask scope. Business assistants see summaries—not voucher lines and payslips. Retrieval watermarked with session logs. Download and export need second authentication.
- Do not give models read-only production DB accounts.
- Mask sensitive fields at integration layer—not model conscience.
- Over-privilege questions log alerts—do not silently wrong-answer or full-answer.
Aggregates Default, Detail Exception
The XYN digital intelligence system sets assistant permissions to role-minimal sets. Trends are enough; people and vouchers need separate paths. Minimization means some answers are "unauthorized"—cheaper than showing what should not be seen.
List finance and HR objects assistants can touch. Detail tables—close first, open aggregates by role.
