Typed AI and permission-grounded copilot
Keep models behind contracts, bounded context, citations, and user approval.
On this page
Canonical source
This public guide is distilled from src/modules/ai-copilot/MODULE.md and src/features/ai. Keep implementation detail in those repository documents.
AI is still external data
Provider adapters and credentials stay server-side. Structured results cross shared Zod boundaries, model selection is centralized, and usage policy is enforced before provider work begins.
The model does not gain authority
Copilot retrieval is tenant- and permission-filtered, results are bounded and source-labelled, and temporary conversations remain in the tab. A proposed write requires separate approval and executes the existing idempotent feature service.
Was this page helpful?
Feedback is stored only in this browser in the starter implementation.