An assistant that gets things done needs limits. In SoWay those limits live on the server, not in the instructions given to the AI.
Why that difference is everything
Instructions given to a model are advice: they hold only as long as the model follows them. A permission on the server is a gate: it holds even when the assistant gets distracted, makes a mistake, or someone tries to talk it round with clever wording.
Permissions per action, not per program
You don’t decide whether “the AI can use the business software”. You decide whether it can create an invoice, and separately whether it can record its payment. Every action has its own permission, granted one at a time.
Your role matters more than the tool
The same question gets different answers depending on whether the owner, an employee or a customer asks it. Nobody sees anyone else’s data, and no business sees another’s.
Devices need an explicit yes
Looking at a device and controlling it are two different things. Controlling it requires consent from whoever has that device in hand, recorded with their name and the date.