What she is allowed to notice, and the one thing she is never allowed to see.
Two kinds, deliberately separate. Ambient sight shows her the screen every few seconds and she comments when something is worth it; it is behind a switch because it is the expensive half (hundreds of calls an hour whether or not anything changes). Deliberate sight is a tool she calls when asked to look at something; it is one call and stays available when the ambient loop is off.
Both pass the same gate first: one monitor is private and is never captured. The rule fails closed: if the focused output cannot be identified, the answer is "do not look", never "look at all of them", because a screenshot with no output named would capture every screen stitched together. A tool call is not an override.
A microphone, the desktop's own audio, and a voice call when allowed. Speech is transcribed with speaker labels so she can follow who said what; short clips still arrive fragmented, which is a known gap. A push-to-talk mode limits the microphone to a held key. Loudness and spectral shape of her own voice are also computed, because her body's motion is matched to them (see Body).
A listening / thinking / speaking state drives small things that read as attention: backchannel nods while listening (small, irregular, not on a period), a head tilt toward the ear that perked while thinking, and a startle of both ears from perception directly (a hard cut at 0.7, a bang at 1.0), rate-limited, independent of any decision to speak.
She can choose to stay quiet for a while: the ambient prompts stop asking her to react, she still hears and sees, still answers when spoken to, and it wears off by itself. Chosen silence is different from being muted, and the console shows the two differently because they fail in opposite directions.
She can look at herself: a capture of her own window on a plain backdrop, either a still or a strip of frames half a second apart, put into her context labelled as her. It exists because she asked a question nobody else could answer for her, whether an arm "reads as a wave or a rule firing". A still cannot tell those apart; a strip can. It costs a picture every time, so it is on demand and rate-limited.