Permissions & disclosure
IN PLAIN LANGUAGE · YOU DECIDE THE DEPTH
GATEKEEPER · CALM BY DEFAULT
POSTURE AT A GLANCE
Nothing is authorized to leave this device.
The Otaru day is private, on device.
WhatsApp is draft-only — nothing sent.
Voice always confirms before acting.
DISCLOSURE DEPTH move as deep as you want
{{ depthHint }}
RELATED
Policies Capabilities & Security Outward Actions
ALTERNATE STATE · NOT CURRENT — REVOKING WHATSAPP. YOU SEE EXACTLY WHAT GOES STALE OR UNAVAILABLE BEFORE YOU CONFIRM.
PERMISSIONS · {{ depthLabel }}
Voice
You can always speak. Before acting on anything consequential, Veda repeats what it heard and waits.
PERMANENT
EXAMPLE
You say “hold both.” Veda shows “Veda heard: hold both” and waits for your confirm before doing it.
IF ON
Speak anytime; consequential speech always confirms first.
IF OFF
Not offered — voice never acts silently, so it can’t be quietly disabled.
FLOOR · DEEP INSPECTION
Audio recognizes intent on device for the confirm step. Consequential actions never fire without your explicit confirm. Nothing is sent.
On-device captures
Your Otaru voice note and 14 photos stay on this device. Veda can build works from them locally.
ON · PRIVATE
EXAMPLE
“A day in Otaru” is grounded in your 0:38 voice note and your photos — none of them left the device.
IF ON
Veda can ground works in your captures — locally.
IF OFF
Works lose their grounding; Veda can’t reference your captures.
FLOOR · DEEP INSPECTION
Stored on device only — no cloud copy exists. Used strictly to ground works you start. A beat with no capture stays empty.
WhatsAppSENSITIVE
Veda can turn things you point it at into drafts. It never sends messages, and nothing goes back to WhatsApp.
DRAFT-ONLY
EXAMPLE
A WhatsApp thread you shared became a private draft. It stayed a draft — nothing was sent.
DRAFT-ONLY
Derived items become private drafts you control.
IF OFF
No new drafts; existing drafts stay as they are.
FLOOR · DEEP INSPECTION
Scope is read-into-draft only. No outbound messages. Revoking is previewed before it takes effect — you see what goes stale first.
IF YOU REVOKE · WHAT CHANGES
STALEThe 1 private draft derived from your WhatsApp thread is kept, but no longer refreshed or re-derivable.
GONETurning future things you point at into drafts becomes unavailable.
SAFEYour on-device captures and the Otaru work are unaffected.
CONFIRMING PRODUCES THIS DECISION RECEIPT
WHATRevoke WhatsApp · was draft-only
EFFECT1 draft stale · new drafts unavailable
OUTWARDnone — nothing was ever sent
REVERSIBLEyes — reconnecting is a new decision
RECORDEDon device
Outward releaseSENSITIVE
Nothing goes out — no share, publish, or send — until you approve the exact artifact at the gate.
NONE AUTHORIZED
EXAMPLE
The Otaru piece is a draft. There is no way for it to leave without your approval at the Exact-Artifact gate.
NOW (OFF)
Nothing leaves. Every release routes through the gate.
IF EVER ON
You’d still approve each exact artifact — the gate never goes away.
FLOOR · DEEP INSPECTION
No standing outward authorization exists. Grants are per-artifact, at the gate, and revocable. As of now: zero outward grants.
Cloud sync
No copy of your data is kept off this device.
NOT CONNECTED
EXAMPLE
There is no cloud backup to point to — nothing has been copied off.
FLOOR · DEEP INSPECTION
Not set up. No endpoint, no stored copy. Connecting would itself be a sensitive change with its own receipt.
DECISION RECEIPTS
Every sensitive change makes a receipt you keep. No sensitive changes this session — nothing new to show. Posture decisions are recorded on device and reversible.
VEDA HEARD
“show me the floor for WhatsApp”
confirm first
Today
Portfolios
Veda
Review
Knowledge
Trust — permissions
Every permission is stated in plain language, with an example and what changes on vs off.
Look as deep as you want — Glance, Cockpit, or Floor. Nothing is hidden behind the surface.
A sensitive change previews its consequences first and produces a receipt you keep.