A user should always understand what an AI can access and what it is allowed to do.