The assistant looks things up with tools that run as the person asking, so it can never see a job, build or setting that person cannot see in Jenkins.

• Build logs: the end of a console log, or lines matching a search. Secrets are removed first: Jenkins' own masking, plus patterns for keys, tokens, passwords and private keys.
• Job configuration: parameter names and defaults (never password defaults) and triggers. Needs the job's Extended Read permission. Inline Pipeline scripts are never sent.
• Source control: repository types and addresses, and commit authors and messages.

Who asked, and which tools ran, is logged to the io.jenkins.plugins.concierge.audit logger. The question text and tool arguments are logged at FINE, so they stay out of the system log; add a log recorder for that logger at FINE to keep a full audit trail.