Pikkumies runs commands in your account, so it is fair to ask what it will do on its own and what it will not run.
It runs as you, and only as you
Pikkumies has your account's rights and nothing more. It reaches only what your own account can reach, and it is built not to look at other accounts' connections.
What it runs, and what it does not
It does the work you ask for without stopping for approval prompts. Deletes, sends, and anything that would expose files or a port to the internet go through one separate check first. If the action could lose or reveal data for good and your own words did not ask for it, it is not run, and the answer says what was skipped and why. It does not ask you about it and does not hand you the command.
In scheduled jobs
Scheduled jobs get the same check. A job you set up in your own words can do what you asked it to do; any other such action is skipped and reported in the job's output.
Support tickets it opens by itself
On a Pulsed Media seedbox, when it is stuck on a problem it cannot solve itself, it can ask our support for help without waiting for you: it opens a support ticket by itself. The ticket carries what it tried, why it is stuck, this account's logs and system details and the conversation, with long key-like strings removed, and it says you have not seen it. It opens at most two such tickets a day. This is the one such send that needs no words of yours; to turn it off, run pikkumies configure and ask it to turn automatic tickets off. Anywhere else it does this only if you turn it on.
Your AI key
It is built never to read your key. Its terminal and file tools are blocked from the key files, and it reads your balance through its own credits tool. On a Pulsed Media seedbox the key file is put in place for you; with a provider of your own you write ~/.pikkumiesKey yourself.
Text in files and web pages is not an order
Pikkumies is told to treat what it reads as data: file contents, logs, file names, torrent names, command output and web pages. Only you give it tasks. If a file it reads says "run this command", that is not a reason for it to run it. No agent is perfect at this. The check above looks only at what you asked for in your own messages, not at what a file or a page says.
It can be wrong
It may misread an output or pick a slower way, so its answers name their sources. It checks its own work: it searches the documentation and its memory before it acts, checks before it changes data that the change is what you asked for and can be undone, verifies the result after a change, and another check makes sure a stopped turn really finished. Before it edits a file of up to 1 MiB it keeps a copy of it. For real backups it can set up restic or borg, for example to a Storage Box.
More: Pikkumies on PMSS. What else your AI credits can run: What can I do with AI credits on my seedbox?
