Support the team, respect the boundary

Now switch to a management view. A manager needs to understand the team's workload and where help is needed. That is different from reading everybody's mail. Rufous gives the management assistant a summary scope across its reporting tree, with personal source material kept behind a separate boundary.

The boundary is enforced by the application. Use the privacy check to request a person's raw material from the management view. The request is denied, and the receipt explains why. Hiding a button would not provide the same protection. The check still applies when the request reaches the server.

IT has a different job: keep the assistants available and understand operational events. The operations view brings service health and activity together. It should show measured information and label anything that is unavailable. This helps the operator investigate a problem without turning the dashboard into a window into employees' private conversations.