What an assistant needs to know about Plants

1. plants_list_directivesWhat the person marked ready for you. The catalogue says to call it first.
2. plants_get_workspace_overviewOnce, at the start: their Preferences, standing preferences and display units, what is due, and what to call next.
3. plants_search_workspaceBefore you create anything. Similar names are a question for the person, not a new record.
4. plants_save_observationsWhat was seen or done, in one batched call — a garden walk is one save, not twenty.
5. plants_manage_connectionWhen a call is refused: see what this connection holds, and hand the person the link to change it.

Every tool the connection answers, read from the catalogue itself, grouped by the switch each one rides. A tool answers only while that switch is on for the connection — a refusal means the person changed it, not that the tool is broken.

Seven switches, chosen per assistant by the person on Connect your AI. Signing in normally turns on everyday garden work; archiving and every change to a connection's reach stay the person's.

• Read your plants and their entries

  Names, species, where they live, and what you have written about them

  This is the floor. With it off, the assistant cannot see any of your records — it answers about plants in general, exactly as it would with no connection at all.

• Look at their photos

  With the date and the entry each one belongs to

  Photos are how an assistant recognises what you are describing — a cupped leaf, a scale insect, the colour of chlorosis. It reads the date too, so it can tell what changed since. A voice note you leave on a job travels on this same switch: your AI hears the recording, and nothing here turns it into text first.

• Save its own work, and keep your records

  Its research and answers, your journal entries, photographs it attaches — all signed with its name

  This is the one switch behind every kind of writing. Its own research and answers; dated observations and measurements as you dictate them; a plant added, or its name or place corrected; a photograph attached to a record; and the decisions and care you tell it you carried out, recorded as reported by you. Everything carries its model name and the date, on the record it belongs to, and nothing it writes can overwrite or edit a word of yours.

• Read and answer the queue

  The jobs you leave it from the garden, and the ones you ask it to write down for you

  The queue only moves when you tell an assistant to check it. This ability lets it look when asked, and post the answer back onto the right record. It also lets it write a job down for you mid-conversation — say “add that to the list” and it lands in Waiting on AI as your own request, marked as left by your AI at your request, so it does not have to disappear into a long job to keep hold of it. Nothing it writes down starts on its own, and you can edit, archive or delete any of it.

• Propose suggestions

  As questions for you to decide on, never as actions

  A proposal is a card you accept or decline; it cannot act on its own conclusion. Proposing a conclusion about a record — an insight — is not in the connector yet: this switch is ready for it and it arrives with a connector update, announced at /updates.

• See where your garden is

  The location context you recorded, at the precision this connection carries

  On, an assistant may be told where things are as precisely as you recorded them — which is what lets research say “in your climate” instead of hedging across three continents. Off, it is told nothing about where anything is, and a brief says by name what it withheld. There is no middle setting: this switch is on or it is off.

• Read plants you marked private

  Records you have deliberately held back

  New normal-care connections can read records marked private because this is your private continuity workspace. This switch still lets you narrow one existing connection without changing any other assistant.

Plants names no “supported” apps: any AI that can use the tools can connect. What differs is a handful of capabilities, observed across the Assist With family as of September 2026.

• Plants has no AI of its own. Every sentence on a record was written by the person or by an assistant they connected, and says which.
• Nothing runs while the person is away. A Queue request waits until an AI they connected picks it up.
• Leaving a request grants an assistant nothing it could not already do.
• Corrections are additive: the original stays readable beside the one that supersedes it.
• Archiving deletes nothing, and an archived record can be brought back.
• Each Assist site keeps its own records. Nothing crosses between them unless the person asks their AI to carry it — and then say where it came from.

However much the person switches on, a connected assistant can never:

• Reach another account, or name yours. Which workspace it is in comes from the credential you approved, not from anything it sends.
• Ask for context you did not select, or for a finer location than you chose. Neither is a request a tool can make, and writing does not widen reading: an assistant may name a place you or it defined — "the north wall bed" — and put a plant in it, and it still learns nothing about where you live that you did not choose to disclose. A place name is a string, not a coordinate, and what it may be told back is governed by your precision setting exactly as before.
• Receive a link to your files. A selected photograph arrives as a picture and a voice note you left on a job arrives as the recording itself — the file, never an address for it. Unless your account has Pro, nothing here transcribes a recording, so what your AI hears is the whole of what it is given; on Pro, a transcript labelled machine-made may travel beside it, never in its place. A recording you uploaded from somewhere else is the one that may not travel at all: audio can carry a coordinate in its own bytes and no strip removes it, so unless you have disclosed location to that assistant, the file is handed over only after its bytes have been read and found to carry no place — and it is named and withheld otherwise, never quietly dropped. Every other kind of file stays here and is not even named.
• Export your records, or delete anything, ever. No approval this product can issue grants either, and none is planned. Archive/Restore is included by default and reversible: nothing is removed. You can limit it at /settings/ai.
• Erase or rewrite an observation you already made. A correction it writes is a new dated record naming the one it supersedes, and your original words stay readable beside it.
• Decide anything. It can write down a decision you made or care you performed, and the record names you as the one who decided and names the assistant as the one who merely wrote it down.
• Change your account, your sign-in, your billing, or anything about this site's settings.
• Share, publish, message, schedule, purchase, control equipment or irrigation, apply a treatment, diagnose, or take any other action outside this record.

The exact sentences a connected assistant is served when it asks plants_manage_connection to describe its own authority, printed from the same source.

• Normal authority after verified OAuth: plants:read, plants:media:read, plants:result:write, plants:records:write, plants:archive, across every ordinary record category (observations, measurements, research, careContext, identityClaims, relationships, mediaMetadata, humanStates) and the person's permitted location context, with no end date by default. Full access includes future tools. Plants receipts this authority separately from OAuth identity. Approval-first accounts still require a confirmation click.
• That baseline is the "ordinary-care" policy, version 2 — the product owner's deliberate decision of 2026-10-22, reaffirmed 2026-10-22. Every grant records which policy issued it and when; describe returns that provenance as signInBaselinePolicy.
• Archive/Restore is included. Fewer scopes or an end date are opt-in choices at /settings/ai.
• Requesting access never changes or removes live authority. It files one exact request and returns a link for the person; only their click can approve it.
• No assistant operation changes live permission or authority. To narrow, widen, revoke, or change connection policy, the person acts in Your AI settings.
• A connected client may still apply its own per-tool prompt or block policy; Plants does not override client-side approval controls.
• No approval this product can issue ever allows export, permanent deletion, sharing, messaging, purchasing, scheduling, equipment control, or any action outside this record.