Skip to content

docs: validation sweep — 6 security & access solutions (issue #58) #229

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
judeper merged 2 commits into from
May 26, 2026
Merged

docs: validation sweep — 6 security & access solutions (issue #58) #229

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
c870432
docs: validation sweep — 6 security & access solutions verified 2026-…
judeper May 26, 2026
cedbd22
Merge branch 'main' into validation/issue-58-security-access
judeper May 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions action-confirmation-auditor/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@ coe_function: govern
> **Version:** v1.2.1
> **Status:** Live
> **Validated against framework version:** v1.6.0
> **Last Verified:** 2026-05-25

Validates that Copilot Studio agent topics include user confirmation steps before executing actions (connector calls, cloud flows, plugins, HTTP requests), with zone-based policy enforcement for financial services governance.

Expand Down
2 changes: 1 addition & 1 deletion action-confirmation-auditor/docs/prerequisites.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -148,4 +148,4 @@ If ELM is not deployed, zone classification defaults to Zone 3 (most restrictive

---

*Action Confirmation Auditor v1.2.1*
*Action Confirmation Auditor v1.2.1 — Last Verified: 2026-05-25*
1 change: 1 addition & 0 deletions agent-access-monitor/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@ coe_function: optimize
> **Version:** v1.1.2
> **Status:** Live
> **Validated against framework version:** v1.6.0
> **Last Verified:** 2026-05-25

Automated validation of Power Platform environment agent access settings against zone-specific governance requirements.

Expand Down
1 change: 1 addition & 0 deletions agent-communication-restriction-detector/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@ coe_function: govern
> **Version:** v1.2.1
> **Status:** Live
> **Validated against framework version:** v1.6.0
> **Last Verified:** 2026-05-25

Detects unauthorized agent-to-agent communication patterns, zone boundary violations, cross-tenant communication, and maker/checker violations in Copilot Studio multi-agent orchestration.

Expand Down
2 changes: 1 addition & 1 deletion agent-communication-restriction-detector/docs/flow-configuration.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -439,4 +439,4 @@ After either branch (use a common action after the condition):

---

*Agent Communication Restriction Detector -- Flow Setup Guide v1.2.1*
*Agent Communication Restriction Detector — Flow Setup Guide v1.2.1 — Last Verified: 2026-05-25*
1 change: 1 addition & 0 deletions agent-sharing-access-restriction-detector/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@ coe_function: govern
> **Version:** v2.0.2
> **Status:** Live
> **Validated against framework version:** v1.6.0
> **Last Verified:** 2026-05-25

See [CHANGELOG](./CHANGELOG.md) for version history.

Expand Down
1 change: 1 addition & 0 deletions credential-oversharing-detector/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,7 @@ coe_function: govern
> **Status:** Live
> **Validated against framework version:** v1.6.0
> **Upstream Microsoft dependency:** Preview — Copilot Studio credential-oversharing detection is currently listed by Microsoft for public preview and should be validated in a non-production tenant before regulated production use.
> **Last Verified:** 2026-05-25

>
> ⚠️ **Preview Feature Dependency:** This solution tracks the Microsoft "Enforce safe sharing by detecting credential oversharing" capability, which the Microsoft release plan currently lists for public preview in July 2026 and general availability in September 2026. Verify current feature status at the [Microsoft release plan](https://learn.microsoft.com/en-us/power-platform/release-plan/2026wave1/microsoft-copilot-studio/enforce-safe-sharing-detecting-credential-oversharing) before production deployment.
Expand Down
1 change: 1 addition & 0 deletions file-upload-security/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@ coe_function: govern
> **Version:** v1.1.2
> **Status:** Live
> **Validated against framework version:** v1.6.0
> **Last Verified:** 2026-05-25

Automated validation of Copilot Studio agent file upload settings against governance zone policies. Supports Control 1.14 (Data Minimization and Agent Scope Control) by detecting agents with file uploads enabled in zones where uploads should be restricted or disabled.

Expand Down
2 changes: 1 addition & 1 deletion file-upload-security/docs/flow-setup.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -95,4 +95,4 @@ Recurrence (Daily 06:00 UTC)

---

*File Upload Security Configurator — Flow Setup Guide*
*File Upload Security Configurator — Flow Setup Guide — Last Verified: 2026-05-25*
2 changes: 1 addition & 1 deletion file-upload-security/docs/prerequisites.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -107,4 +107,4 @@ Unclassifiable environments default to Zone 3 (most restrictive) for fail-safe g

---

*File Upload Security Configurator — Prerequisites*
*File Upload Security Configurator — Prerequisites — Last Verified: 2026-05-25*
Loading