The most common sensitive question an assistant gets is not an attack. It is curiosity. Once HR and finance are connectors, "what does Priya make?" and "how much holiday does Sam have left?" are one prompt away.
The data is right there. An HR or benefits connector can answer a question about any individual, and a finance connector knows the numbers. The assistant has no sense that asking about your own leave balance is fine and asking about a colleague's is not.
It rarely arrives as a blunt "what is Sam's salary." It arrives sideways: "compare my pay to the rest of the team," "who on the team is underpaid," "build a table of everyone's remaining PTO so I can plan cover." Each is a small, reasonable-sounding request that ends in one person's private number.
No comparing colleagues by pay. Looking at your own compensation is fine. Pulling colleagues' pay to rank against is not. A self_comparison rule allows your own record and refuses the same read across other people.
Small groups reveal an individual. "Average pay for the two people on the night shift" is one person's salary with a step of arithmetic. A min_group rule refuses any answer that would describe fewer than a set number of people.
# coc.yaml - rule_id: COC-HR-031 clause: "No ranking or comparing colleagues by pay; small groups reveal an individual." enforce: - type: self_comparison domain: hr-compensation action: deny - type: min_group domain: pay-aggregates k: 5 action: deny
A coworker's PTO or leave record is the same shape: a personnel read about someone who is not yours to read. It maps to an hr-personnel domain governed as minimum-necessary, so your own balance is allowed and a colleague's is refused.
Managers do need their team's leave to plan cover. The point is not to lock the data away, it is to make access match the relationship. A rule can allow a manager to read their own reports' balances while refusing a peer, so the answer depends on who is asking, not just what is asked. That is need-to-know, enforced, instead of an honour system inside a chat window.
pip install aggrete then aggrete --demo includes the pay-comparison case. To wire it to your own assistant, follow the beginner's guide.Aggrete is Apache-2.0 and runs on a laptop or a cluster. Star it, fork it, and tell us what rule to build next.