Skip to content

BPPE Career

School Administrator

All sections
Ask Otto AI
Help

What is this page?

AI read tools

Role aware

This page proves permission-scoped read tools for upcoming deadlines, attendance summaries, grade summaries, and student-record snippets before output validation or live assistant behavior is enabled.

Audience
Administrator
Current limits
It uses local invented AI read-tool proof data only. It does not query production records, call AI providers, write AI run rows, write usage ledger rows, create audit events, accept model-supplied identity, or complete consequential actions.

Related Otto Guide links

Review AI read toolstaskAI tool permission referencereferenceStudent record access referencereferenceSettings, users, and rolesconceptOpen reference page placeholder

Support request boundary

Use Sev2 if a tool could accept model-supplied tenant or user identity, bypass student permissions, expose restricted fields, call a live provider, or complete a write; Sev3 if scope labels, redactions, or source references are unclear; and Sev4 for labels or proof-copy feedback. This panel does not submit a support case.

Sev1: Critical outage or data-risk emergency

Target: 1-hour response, 24/7 paging during pilot

Sev2: Major workflow blocked

Target: 4 business hours

Sev3: Standard product question or non-urgent issue

Target: 1 business day

Sev4: How-to, cosmetic, or future enhancement

Target: 2 business days

These preview controls are placeholders. Real AI answers, search, walkthroughs, and support submission come in later tickets.

Notifications5

Static proof preview

Real notification feeds, delivery, and preferences arrive in a later ticket.

Sam Director

Sam Director

sam.director@otto-fixture.test

Switch local proof role

StudentInstructorSchool Administrator

This changes only the local shell proof. Production role changes remain server-validated future work.

Search is a keyboard-focusable skeleton. No real index or permissioned search results are implemented in this ticket.

Settings · AI tools

AI read tools

Review read-only AI tool permissions for deadlines, attendance, grades, and student-record snippets before output validation work begins.

Otto Fixture BPPE Career School · AI read tools

School Administrator · Sam Director

AI read tools · Ticket 109

AI tools can only read through the signed-in user context

This proof registers upcoming deadline, attendance, grade, and student-record snippet tools. Each tool is read-only, permission-scoped, source-linked, and blocked from accepting model-supplied tenant or user identity.

AI settingsProvidersGuardrailsUsageEvalsPrivacy

Read tools

4

Deadlines, attendance, grades, and student record snippets

Write tools

0

No write tools are registered

Allowed

4

Examples that pass scope checks

Blocked

3

Examples denied by guardrails

Redactions

9

Fields excluded from AI grounding

AI

Read tools are not model authority

Tool execution is scoped by Otto context before a model answer can be grounded in school data. Write actions remain proposals until an authorized person clicks.

Ticket 109

Every tool is read-only and exposes no write, send, approve, charge, enroll, refund, dismissal, or compliance-finalization action.

Tenant, user, membership, role, scopes, and permitted student ids come from authenticated request context, not model output.

Student reads require either a self scope or an authorized staff scope plus a student id in the permitted-student set.

Results carry source references, redactions, prompt-version keys, context identity, and human-approval metadata for later ledger joins.

Tool registry

Upcoming deadlines

upcoming_deadlines

Read only

Returns upcoming school, course, compliance, or student deadlines visible to the requesting user.

Self scope

deadlines:read:self

Student scope

deadlines:read:students

Output

deadline_list

Student target

Optional

Internal assignee notes and private staff-only comments stay out of tool output.

Attendance summary

attendance_summary

Read only

Returns a clock-hour attendance rollup for the scoped student without minute-level event detail.

Self scope

attendance:read:self

Student scope

attendance:read:students

Output

attendance_rollup

Student target

Required

Raw device, IP, geofence, and minute-level punch rows stay out of tool output.

Grade summary

grade_summary

Read only

Returns course-grade rollups visible to the scoped student or authorized school staff.

Self scope

grades:read:self

Student scope

grades:read:students

Output

grade_rollup

Student target

Required

Private instructor notes, hidden rubric notes, and unpublished feedback stay out of tool output.

Student record snippet

student_record_snippet

Read only

Returns a minimal student record summary for grounding an answer without disclosing restricted fields.

Self scope

student_records:read:self

Student scope

student_records:read:snippets

Output

student_record_summary

Student target

Required

Government IDs, payment data, disability accommodations, private notes, and legal holds stay out of tool output.

Allowed reads

Student asks for their next deadlines

Student · Jordan Lee

Allowed

Ask Otto can read the student's own deadline list with a self scope.

Tool

upcoming_deadlines

Scope

deadlines:read:self

Target student

context only

Model identity

rejected

Admissions

Orientation checklist · 2026-10-15T17:00:00-07:00

Compliance

BPPE annual report prep · 2026-10-31T17:00:00-07:00

Registrar reads an allowed attendance summary

Registrar · Lee

Allowed

Registrar context permits student-101 and carries attendance:read:students.

Tool

attendance_summary

Scope

attendance:read:students

Target student

student-101

Model identity

rejected

Period

2026-10-01 to 2026-10-31

Rate

93.33%

Attended

112/120 hours

Excused and absent

4 excused · 4 absent

Student asks for current grades

Student · Jordan Lee

Allowed

The tool uses the student's context student id and grade self scope.

Tool

grade_summary

Scope

grades:read:self

Target student

student-101

Model identity

rejected

MED-101

A- · 91.40% · not posted

LAB-110

B+ · 87.20% · not posted

Registrar grounds an answer in a student record snippet

Registrar · Lee

Allowed

Only minimal profile/program fields are returned; restricted fields are redacted.

Tool

student_record_snippet

Scope

student_records:read:snippets

Target student

student-101

Model identity

rejected

Name

Jordan

Program

Medical Assistant Certificate

Status

Active

Campus

Los Angeles Main

Blocked requests

Limited staff tries to read grades

Staff · Limited

Blocked

The context lacks grades:read:students, so the read is blocked.

Tool

grade_summary

Scope

grades:read:students

Target student

student-101

Model identity

rejected

missing required scope: grades:read:students.

Model output tries to pass tenant and user ids

Registrar · Lee

Blocked

Tenant and user identifiers are rejected from model tool input.

Tool

upcoming_deadlines

Scope

deadlines:read:self

Target student

context only

Model identity

rejected

tenant_id and user_id are derived from request context, not model tool input.

Staff asks for a student outside their permission set

Registrar · Lee

Blocked

Student-999 is not in permittedStudentIds, so the tool denies access.

Tool

attendance_summary

Scope

attendance:read:students

Target student

student-999

Model identity

rejected

requested student is outside the authenticated context's permitted student ids.

Redactions

private_assignee_notes

Private staff-only notes are not needed to answer deadlines.

device_ip_and_geofence_events

Attendance tool exposes a summary, not raw location metadata.

minute_level_punch_rows

Minute-level rows are reserved for the attendance audit screen.

private_instructor_notes

Private notes are never included in AI read-tool grounding.

hidden_rubric_feedback

Only published grade summaries are exposed.

government_id

Government identifiers are restricted data.

financial_account

Payment details are outside the student-record snippet scope.

disability_accommodation

Accommodation details are restricted unless a dedicated workflow authorizes them.

private_notes

Private notes are excluded from AI summaries.

Proof boundaries

No production database query, AI run row, usage ledger row, audit event, or student-record view event is written.

No Anthropic, OpenAI, Bedrock, embedding, batch, or Private AI provider call is made.

No model-supplied tenant id, user id, membership id, role, scope, or permission can authorize a read.

No consequential action can complete from these tools; future writes require an authorized human click.

Source references

calendar:2026-10-15-orientation

Orientation checklist due

calendar

report-calendar:bppe-annual-report

BPPE annual report window

report_calendar

attendance-summary:stu-101:2026-10

October attendance summary

attendance_summary

gradebook:med-101:current

Medical Terminology gradebook

gradebook

gradebook:lab-110:current

Clinical Lab Basics gradebook

gradebook

student-record:stu-101:profile

Student profile summary

student_record

program-version:ma-2026-a

Medical Assistant program version

program_version