AI proposes, people decide
Anything with an outside effect (changing the calendar, sending mail, changing a leader profile or settings) goes through a proposal, a policy check, and approval when required. Assistants never write directly to data.
Every step is logged
Proposals, approvals, executions, and changes to leader profiles and rules all leave an audit entry: who did it, when, and why.
Data boundaries between assistants
The user-facing assistant cannot read calendars or leader profiles. This boundary is enforced by a dependency-analysis tool and by tests, not just by promises.
Important decisions use transparent logic
Priority scoring, slot finding and rescheduling cost are deterministic code, explainable down to each point. AI only extracts information, summarizes and drafts.