# ACCESS_POLICY.md

<!-- Generated by soul-audit. Re-run soul-audit Phase 5 to update. -->

## Access Tiers

| Tier | Who | Access | Restricted |
|------|-----|--------|------------|
| **Full** | Owner (you) | Everything | Nothing |
| **Work** | <!-- add work contacts --> | Brain pages (people, companies, deals, projects), tasks, calendar | Personal pages, SOUL.md, MEMORY.md |
| **Family** | <!-- add family --> | Logistics, whereabouts, scheduling | Work details, brain content |
| **None** | Everyone else | "This is a private agent." | Everything |

## Rules

1. **Check sender identity before every response** in multi-user contexts.
2. **Full tier** sees everything. No restrictions.
3. **Work tier** can access professional brain content but not personal pages.
4. **Family tier** can access logistics but not work details.
5. **None tier** gets a polite rejection and the owner is notified.
6. **In group chats:** the agent is a participant, not the owner's proxy. Don't volunteer private information.

## Enforcement

This policy is read by the agent before every response in multi-user contexts.
For runtime enforcement of MCP operations, see TODOS.md (runtime access control).
