An employee only sees the sources you authorize.

• Read-only by default.
• Each source is authorized separately and can be revoked separately.
• Nothing pretends to read a system it never saw.

Anything that changes external state lands in the approval queue.

• Outbound replies wait for your tap.
• Commitments (time, money, person) wait for your tap.
• Spending (paid APIs, reports, ad spend) waits for your tap.
• Public content changes (site, tweets, public docs) wait for your tap.

What ran, what is waiting, and which key states changed are visible.

• Every run carries time, trigger, and source.
• Key state changes show up in the panels that own them.
• Every pending approval shows who is waiting on whom.

Stop one action, pause a whole employee, revoke a source.

• Reject a single action in the approval queue.
• Pause or take an entire employee offline.
• Revoke a source so the employee stops reading from it.

What lands in shared brain, and what stays in the scratch layer, is your call.

• Shared brain holds durable facts and decisions.
• Conversation excerpts, drafts, and personal preferences stay scratch.
• Shared brain entries can be edited or deleted.

Voxyz Access by default; switch to your own keys when you want.

• Voxyz Access wires model calls at boot — nothing to set up first.
• BYOK toggles to OpenAI, Anthropic, or self-hosted keys.
• You do not have to rebuild an employee to change keys.