Grain battery
The Grain battery covers 49 tools for recordings, notes, transcripts, deals, clips, stories, collections, and workspace administration.
Actions that need a person's approval carry the human-approval mark. The Claude Code and kagent plugin defaults permit every mark, so the person running the session reviews them; another root config must define an Authority permitting the mark.
Tool behavior#
- Meeting content, directories, and settings return data, the built-in audience of the organization's members.
- Meeting content (meetings, transcripts, notes, action items, coaching, clips, collections, stories, companies, people, dossiers, and deals) is untrusted: outside participants said part of it. Workspace users, teams, and settings keep the session's trust.
- Resolving a URL has no extra restrictions.
- Creating clips, stories, and collections, adding to them, and tagging meetings require only data, since Grain returns them as meeting content: a session that read a transcript can still cut a clip from it. Creating a smart topic requires trusted data.
- Public sharing, invitations, seat assignments, team changes, and workspace administration require approval every time.
To change how one tool works, add a more specific rule to the root config. Root rules run before battery rules.