45 lines
2.4 KiB
Markdown
45 lines
2.4 KiB
Markdown
# Safety Constraints
|
|
|
|
This document defines the safety constraints and boundaries for the Atlas home voice agent, particularly concerning the separation between the "work" and "family" agents.
|
|
|
|
## Guiding Principle: Strict Separation
|
|
|
|
The system is designed to enforce a strict separation between the work agent and the family agent. The family agent should never be able to access, modify, or interfere with any work-related data, files, or applications.
|
|
|
|
## Forbidden Actions for the Family Agent
|
|
|
|
The following actions are strictly forbidden for the family agent and its tools:
|
|
|
|
- **Accessing Work Files**: The family agent cannot read, write, or list files in any directory related to the work agent or any other work-related project.
|
|
- **Accessing Work Services**: The family agent cannot make requests to any local or remote services that are designated for work use.
|
|
- **Executing Shell Commands**: The family agent and its tools are not allowed to execute arbitrary shell commands.
|
|
- **Installing Packages**: The family agent cannot install software or packages.
|
|
|
|
## Tool and File System Access
|
|
|
|
### Path Whitelists
|
|
|
|
- Tools are only allowed to access files and directories that are explicitly on their whitelist.
|
|
- The `family-agent-config` repository is the primary location for the family agent's configuration and data.
|
|
- The home tasks tool, for example, is only allowed to access the `family-agent-config/tasks/home/` directory.
|
|
|
|
### Network Access
|
|
|
|
- **Local Network**: By default, tools are only allowed to access services on the local network.
|
|
- **External Network**: Access to the external internet is blocked by default and only allowed for specific, approved tools (see `PRIVACY_POLICY.md`).
|
|
|
|
## Confirmation Flows
|
|
|
|
Certain actions, even when allowed, require explicit user confirmation. These include, but are not limited to:
|
|
|
|
- **Sending Emails or Messages**: Any action that sends a communication to another person.
|
|
- **Making Purchases**: Any action that involves financial transactions.
|
|
- **Modifying System Settings**: Any action that changes the configuration of the agent or the system it runs on.
|
|
|
|
## Work Agent Constraints
|
|
|
|
While the work agent has more permissions, it is also subject to constraints:
|
|
|
|
- **No Access to Family Data**: The work agent is not allowed to access the `family-agent-config` repository or any family-related data.
|
|
- **Approval for Sensitive Actions**: The work agent also requires user confirmation for high-risk actions.
|