Question 1

What is the Pulse Assistant and how does it assist?

Accepted Answer

The Pulse Assistant is an AI-powered diagnostic and troubleshooting shell embedded in Vibe ERP. It monitors active telemetry (console error streams, workspace paths, active tenant logs) to instantly identify transaction anomalies, explain code bugs, suggest concrete workarounds, and draft forensic reports that administrators can submit as platform support tickets with a single click.

Question 2

Is the Pulse Assistant scoped by tenant and module permissions?

Accepted Answer

Yes, absolutely. Strict data isolation is enforced both on the client and server. The backend validates users via Firebase Custom Claims and reads/increments usage statistics solely within the tenant's individual Firestore namespace (tenants/{tenantId}/settings/subscription). Furthermore, telemetry is restricted to the specific views the user is role-authorized to access, preventing any cross-tenant data leaks.

Question 3

Is the AI secure against Prompt Injection attacks?

Accepted Answer

Yes. The Pulse Assistant is secure by design. It structures instructions using Gemini's isolated systemInstruction framework, which has absolute priority over conversational content. Additionally, the AI is completely read-only on database transactions: it only assists via text and cannot execute database mutations directly, keeping your core business data completely safe.

Question 4

How are the AI credits measured and limited?

Accepted Answer

AI queries are budgeted by subscription plan tiers to control costs and resources. The Trial Plan includes 5 AI inquiries per month, the Growth Plan includes 50 inquiries, and the Enterprise Plan provides 1,000 inquiries. Usage counters are updated securely via transaction-safe atomic increments in Firestore and automatically reset on a rolling 30-day billing cycle.

Question 5

Can the Pulse Assistant read or modify my company's files and database records?

Accepted Answer

No. The Pulse Assistant has zero read or write access to your tenant databases, transactions, customer profiles, or server files. It acts solely as a client-side telemetry scanner—reading only browser-level console warnings and current page paths during active troubleshooting. The AI is entirely output-only and cannot perform database mutations or bypass Firestore security controls.