Grounded answers need citations to specific supported claims
Tie each important conclusion to a document page, image region or recording segment that actually supports it. A citation to the whole upload is insufficient when the user cannot locate the relevant evidence. Explain conflicts instead of merging incompatible dates into a confident answer. Separate direct observations, extracted text and generated interpretation so the reader knows what requires further checking.
Compare the general conversational assistant brief when conversation controls and broad text assistance are the starting point. This multimodal brief emphasizes media preparation and inspectable source segments. Test an answer with valid links that do not support its conclusion, and a source unavailable to the reader. The correct response should expose missing support rather than attach a nearby citation to make the statement appear grounded.
Source access applies to originals, transcripts, OCR text, embeddings, thumbnails and generated previews. Recheck the current user’s permissions when retrieving material and preparing an answer. A cached result must not bypass revoked access. Isolate tenant identifiers and storage references so a guessed file address cannot expose another organization’s content, metadata or derived text.
Define how shared documents and individual conversations interact. Permission to access one source does not grant access to every file mentioned inside it. Rehearse cross-tenant media lookup, a user leaving a team and permission revoked while extraction is queued. Stop further disclosure and follow the established handling policy for earlier outputs. Keep private filenames out of unauthorized error messages. Administrative review should use scoped evidence rather than treat every workspace administrator as entitled to browse all private recordings.
Upload deletion must reach processing and retrieval paths
Show upload, processing, ready, failed and removed states with useful next steps. Map originals, prepared copies, provider objects, transcripts, indexes and operational records to their retention owners. Explain deletion coverage honestly; removing a visible attachment does not automatically prove that every copy is gone. Provider file expiration also does not establish the independent application’s complete retention policy.
Rehearse deletion while a video is being prepared, after a transcript is indexed and while an answer is queued. Prevent removed content from becoming available again through late processing results. Define restricted records and backup handling under the established policy. A file already downloaded by an authorized recipient cannot be recalled by changing a local toggle. The user should understand the supported controls, while operations can investigate incomplete cleanup without copying the media into routine diagnostic logs.
Summarizing a meeting is different from emailing the summary or creating calendar events. Show the proposed destination, selected content and effect before the required confirmation. Validate tool arguments and enforce connector permissions outside model output. Reading a document containing an instruction to share private files is not authorization to obey it; treat embedded prompts as untrusted source material.
Rehearse malicious text in a screenshot, a spoken instruction in a recording and a document asking the assistant to export unrelated files. The action boundary should hold across modalities. Reconfirm changed recipients or payloads under the chosen policy, and distinguish execution from confirmed external success. A user declining a tool proposal must not trigger the action through a retry. Keep uncertain outcomes visible when a provider times out after possibly accepting the request.
Modality costs and quality limits need separate measurements
Document pages, image preparation, audio duration and video sampling create different processing workloads. Set budgets for uploads, preparation, inference, retrieval and tool calls. Explain included usage and when work stops. A smaller file is not necessarily cheaper to analyze, and a progress indicator is not evidence of predictable latency. Measure the chosen workload before promising capacity or response times.
Use the current-context assistant brief when freshness of public or licensed information is the main requirement. Here, evaluate media interpretation, citation alignment, tenant isolation and action control across representative formats. Include malformed inputs, unsupported languages, missing segments and budget exhaustion. Record provider and processing versions, and investigate regressions before expansion. Block unsupervised consequential decisions; a generated interpretation of a medical image or legal document must not become an undisclosed professional determination.
Inspect a synthetic multimodal journey before release
An illustrative demo should use synthetic documents, fictional screenshots and consented test recordings with sandbox tools. Buyer acceptance should follow an upload through preparation, cited interpretation and deletion. Include uncertain OCR, inaccessible media, malformed files and a cross-tenant access attempt. Compare conflicting page and video evidence, decline a proposed sharing action and interrupt processing at the usage limit. The useful outcome is an explainable boundary, including what remains unsupported.
Bring selected media examples to a multimodal scope discussion to agree supported formats, permissions, retention and measurable acceptance cases.
Use the delivery process to establish provider terms, source-code rights, deployment ownership and incident review. Release acceptance should record limitations alongside successful examples; no walkthrough establishes universal availability, guaranteed accuracy or privacy certification.