What Nirvaana can see and do

• The conversation you are having with it right now.
• Everything it has kept for you before, which it can search.
• The promises and open questions it has written down.
• The worlds you have brought into this conversation, and your own world.
• The apps you connected, and only what each one says it reads: your Google Calendar, the Google files you picked, your Microsoft 365, Linear, Notion pages and the rest (see Connecting your apps). It reads them when you ask about them, in your own conversation.
• The public web. It can search, and read a page it found or one you give it. It treats what a page says as information, never as orders.

This list is worth reading once, so you are never guessing.

• Any app you have not connected. Your email, calendar and files stay out until you connect them.
• In an app you did connect, anything beyond what its card says it reads.
• Anything behind a login. Its web search reads only public pages; it never signs in anywhere for you.
• Your phone, or any other software you use that is not on the list of connections.

So if you ask it what is on your calendar tomorrow and you haven't connected a calendar, it can only tell you what you told it. It should say so rather than guess. If it ever answers as though it looked inside an account you didn't connect, that is wrong and worth reporting.

Most of it stays inside your own account. What reaches a world is a fact you said yes to, and what reaches one of your apps is a step you approved.

• Keep a fact, and search back through what it has kept.
• Write down a promise, and close one when it is done.
• Leave a question open for tomorrow, and close one.
• List what it can reach: the apps and computers you connected, and anything you built together.
• Adjust how it writes to you, and how formally it speaks in a given world.
• Think a question all the way through, when you press Think harder instead of Send.
• Look something up on the web and read the pages that matter. The pages it used show under its reply as small links, so you can check them. A search carries only the words the question needs, never your name, your contacts or anything else it keeps for you.
• Read you what is waiting for your approval, and take your yes or your no to one, after saying who would see it. Only when no world is in the conversation; with one there, press Approve on its card.
• Keep what you tell it about a stage lighting rig, in your own words, and read it back.
• In an app you connected, propose a step, such as an event in your calendar or an issue in Linear. It shows you exactly what, under “Before it goes out”, and does it only when you press “Approve”.
• Make a quick file (a flyer, a one-page notice, a simple document) and change it when you ask. For anything new to look at, it first asks what you want people to feel when they see it. Each one comes back as a PNG and a PDF, or a text file, under its reply, and every version is kept. It sends and posts nothing; you download it, keep it, or send it yourself.

When it uses one, the conversation says so in plain words: “Kept that.”, “Noted the promise.”, “Looked through what I know.”, “Looked it up on the web.” You always see what it did.

Ask it what it can do and it lists what it can reach for you: your connected apps and computers, which are live now, and any procedure you built together. With none yet, it says so.

Each app you can connect is on “Your connections”, and its card says up front what it lets Nirvaana see and what it lets it do. An app with no Connect button there isn't open for you.

“My computer” means your own computer, where Claude Code is signed in to Nirvaana: a task for it goes there, and waits until one of your computers is connected.

Reading is Nirvaana's, and sending, paying, signing, deleting or contacting another person is never done on its own. It asks, it waits for you to say yes in that same conversation, and that yes covers only the thing it asked about. Not the next one.

A task you scheduled works the same way. When it comes round, Nirvaana asks before running it, and your yes to run it is not a yes to anything it would send or pay along the way. Each of those still asks.