pasiero

pasiero / safety

Close to your files, careful with your trust.

Pasiero is meant to work alongside you across the personal files that make up a life: photos, documents, downloads, projects, notes, and records. That closeness makes clear boundaries more important, not less.

03 · access, approval, and recovery

Eight product boundaries

Help begins with permission.

  1. 01

    Access is chosen, not assumed

    You decide which files, folders, devices, or libraries Pasiero can work with. Access to Photos does not imply access to Taxes, Passwords, or every other folder on the machine.

  2. 02

    The current scope stays visible

    The assistant should be able to tell you what it can see and why. Hidden background access is incompatible with a personal file companion.

  3. 03

    Looking is separate from changing

    Searching for old tax returns, duplicate photos, or a missing warranty does not grant permission to rename, move, or remove any of them.

  4. 04

    Every change gets a preview

    Before acting, Pasiero shows the files involved, their destinations, the reason for the proposal, and anything that may not be reversible.

  5. 05

    Confirmation is specific

    Your approval covers the visible proposal once. It does not become permanent permission or silently apply to a later batch.

  6. 06

    Changed circumstances stop the plan

    If a file has moved, changed, or been replaced since the preview, Pasiero should stop and ask again rather than guess.

  7. 07

    Recovery comes before deletion

    Removing a file means placing it somewhere recoverable first. Permanent deletion is a separate, deliberate decision.

  8. 08

    The history is readable

    You can see what Pasiero suggested, what you approved, what changed, and how to undo it without reading a technical log.

What a useful preview looks like

Personal files deserve human language.

A plan should read like a thoughtful teammate explaining the task, not like a program exposing internal commands.

Proposed organization

Family Photos / 2026 / Lisbon

create   one trip folder
group    126 photos into four days
keep     every original filename
copy     the itinerary into the folder
move     no photos outside Pictures
delete   nothing

The summary describes the personal result and the boundaries that matter before you approve it.

Why the plan stopped

I did not move the receipts.

Two files changed after the preview,
and one destination already contains
a document with the same name.

I left everything in place.
Would you like a new proposal?

A safe assistant turns uncertainty into a question, not an improvised decision.

The mistakes worth designing around

Most harm begins as a small assumption.

The request was misunderstood

"Clean up Downloads" could mean group by project, remove installers, or archive old files. Pasiero should ask before choosing a definition with consequences.

clarify before acting

A personal folder was unrelated

A search for travel receipts should not wander into health records because both contain PDFs and dates.

purpose limits scope

The files changed mid-conversation

Sync software, another family member, or you may edit a folder after the preview. The old plan no longer describes reality.

check again before acting

The safety model should feel the same in every channel. A faster interface does not earn broader authority. See how one assistant spans many channels →