Reword a request a safety filter declined, in a fixed order, and keep the pair — because the refusal is usually about how it was asked rather than what was asked.
- Targets
- copilot-studio
- Highest risk
- read-only
- Execution
- human-only
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Find why an agent keeps replanning past its budget — usually because nothing it called ever said plainly that it had succeeded.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Find out why a Copilot Studio agent is answering wrongly — whether the content is missing, unreachable, or being ignored — before changing anything.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-only
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Take a published Copilot Studio agent back out of service, least drastic action first, when it is answering badly in front of users.
- Targets
- copilot-studio
- Highest risk
- irreversible
- Execution
- human-only
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Stop a Copilot Studio agent burning credits faster than it was budgeted for, before deciding whether the consumption is genuine.
- Targets
- copilot-studio, power-platform
- Highest risk
- destructive
- Execution
- human-only
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Make an approval gate real — the draft visible where the record lives, a cap on what one approval covers, and a rejection path somebody has actually taken.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Deploy one tool that reports the caller identity it actually observes, in the host you will really use, before designing an integration around an identity you assumed.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Hand back a handle instead of waiting, tell the person what to expect, and make sure the retry they will attempt anyway does not do the work twice.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Reconcile what was indexed against what exists, then test the permissions in both directions — including one query for the most sensitive content in scope.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Turn "we can block it" into a measured control by withdrawing something on purpose, checking it as an ordinary user, and writing down how long it took.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Measure the thing you are replacing before you lose access to it, gate the switch on the same questions, and set the decommission date at cutover.
- Targets
- copilot-studio
- Highest risk
- irreversible
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Check a document generator against sparse and missing input, where fabrication is disqualifying rather than one score among several.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory
Set the threshold above which extracted values are accepted unreviewed from measured accuracy on real documents, after establishing that the results can be written anywhere at all.
- Targets
- copilot-studio
- Highest risk
- reversible-write
- Execution
- human-with-agent
- Profile
- P1
- Trust
- T2 · 2026-10-11 · runbooks.directory