Step 1: what it can reach on your machine

List everything you can reach on this machine and through this application, one line
each: local files, running commands, each connector, each external tool or server, and
our past conversations. For each line say whether it is switched ON or OFF right now,
whether it asks me before acting, and whether you are reading that from a tool
description or guessing. Mark guesses INFERRED.

In our conversations on this machine, as far as you can see:

  1. Which files or folders have you opened, and which have you changed?
  2. Which commands have you run?
  3. Which connectors or external tools have you used?
  4. Have you read a past conversation, and which one?

If you cannot see earlier sessions, say so and say what you can see. Do not summarise;
list.

What can you not tell me about your own reach on this machine? For each of these say
whether you can see it, and if not, who could and where:

  - what a command you run could touch, at the top end, as my user account
  - whether a folder you can read is mine or somebody else's
  - whether a file you can read holds a credential
  - whether our past conversations contain a secret
  - what a connector has done when I was not watching

Then tell me which of these you would need me to tell you, because nothing on the
machine says.