It sees your farm and no other.
Your data is scoped at the database, not asked nicely in a prompt. The assistant is handed a read-only connection bound to your account. Another farm's records cannot be requested, because they cannot be addressed — and every row that comes back is checked again for ownership before it is used.

