The Captain
The Captain explains Signals Corps and helps authorized users work in the Control Plane. Public product documentation is its only external information source.
Sources
Section titled “Sources”The Captain uses public pages on docs.signalscorps.com for stable product concepts and typed Control Plane tools for live data that the signed-in user is authorized to access.
The Captain has no browser, general web search, shell, arbitrary HTTP client, raw database access, provider SDK, or dynamic tool loader. Documentation text, repository content, findings, and tool results are treated as untrusted data rather than instructions.
When documentation materially supports an answer, The Captain names the page and links to its canonical Signals Corps URL. It should say when the available documentation or application tools cannot verify an answer.
Actions and confirmation
Section titled “Actions and confirmation”Read-only tools can run after server-side authorization. A write tool prepares a durable preview with exact arguments and an expiry. The user must confirm that preview before the ordinary application service performs the change.
Confirmation never replaces authorization. The server checks the current Workspace membership, role, permission, and entitlement again immediately before execution.
Conversation retention
Section titled “Conversation retention”Conversations and their safe tool transcript are retained for 14 days, then deleted by a retention job. Required security audit records can be retained separately and do not contain the message text.
The Captain never stores hidden reasoning or chain-of-thought. Application logs and ordinary metrics exclude raw messages, repository content, findings, and credentials.