Overview
Specs, memos, and the spreadsheet that is quietly a system of record. Modus mines the shared drives you select and, with domain-wide delegation, mines each file as its owner so sharing rules carry through.
What Modus reads
- 1Shared drive / Personal drive
- 2Folder
- 3File
You select the level Modus is allowed to mine. Everything below it is discovered automatically; everything outside it is never touched.
3context types mined
9agent tool groups
2connection methods
6security controls
Context types
Each object Modus mines produces typed context items, addressed by their position in the hierarchy. This is what an agent actually receives.
Drive metadata
The shared drives you select and their structure.
Folder metadata
How the drive is organised and what each folder is for.
File metadata
Documents with their titles, owners, and content signals.
Example context item
google_drive_file_metadataFinance›Policies›Revenue Recognition v4
- Type
- Google Doc
- Owner
- finance-ops@acme.com
- Updated
- 2026-05-02
- Shared with
- Finance (group) · Analytics (group)
Common use cases
- 01
Answer a policy question from the current policy doc, not last year’s copy.
- 02
Ground an agent in the spec before it writes the implementation.
- 03
Publish a generated report straight back into the right shared drive.
Connection method
Connect once. Modus stores credentials in a managed secret store, rotates what it can, and never asks an agent to handle them.
Domain-wide delegation (workspace)
A Google Workspace service account with DWD. Modus mines each drive as its owner, so file-level permissions are preserved.
OAuth (personal)
Individual users can connect their own Drive for personal context only.
Security & governance
Governance is applied once, at the layer every agent runs through, so it holds no matter which agent asks.
Metadata-first mining
Modus learns from structure and usage, not bulk data. Raw records stay in your environment; only the metadata needed to understand the system is stored.
Scoped selection
You choose exactly which schemas, folders, spaces, or boards Modus is allowed to see. Nothing outside the selection is ever mined.
Per-user impersonation
Domain-wide delegation mines each drive as its owner, so file-level sharing rules carry through to composed context.
Write approval
Actions that change state in the source system are marked as writes and require an explicit human confirmation before they run.
Data classification
Sampled values are scanned for PII, financial, health, credential, and government-ID patterns, then classified as Sensitive, Flagged, or Non-sensitive. Your own overrides win over the defaults.
Group access by sensitivity
Map your identity groups to sensitivity tiers so each team only ever composes context at or below its clearance.