1
00:00:01,200 --> 00:00:03,900
An AI agent can connect to your business.

2
00:00:04,080 --> 00:00:06,860
But who decides what it is allowed to
change?

3
00:00:07,570 --> 00:00:12,250
I’m Fabrizio Degni. Our PALO pilot connects
Microsoft Copilot

4
00:00:12,250 --> 00:00:14,690
Studio to a controlled catalogue on Azure.

5
00:00:15,090 --> 00:00:18,250
Designed for enterprise teams, it is an
independent, private

6
00:00:18,250 --> 00:00:20,720
technical preview. The purpose:

7
00:00:20,840 --> 00:00:23,600
turn permission into a decision that can be
checked,

8
00:00:23,600 --> 00:00:26,820
constrained, and traced before an action
reaches business data.

9
00:00:27,870 --> 00:00:30,510
Copilot calls the PALO connector through
MCP.

10
00:00:30,510 --> 00:00:33,270
Microsoft Entra supplies identity.

11
00:00:33,570 --> 00:00:36,950
PALO checks the delegated scope, the
mandate, and the

12
00:00:36,950 --> 00:00:41,800
exact requested action. We configured
federated authentication without

13
00:00:41,800 --> 00:00:45,760
a client secret. Agent and reviewer use
separate identities,

14
00:00:46,020 --> 00:00:48,540
operated by the same person in this pilot.

15
00:00:49,090 --> 00:00:50,250
Then, the real test.

16
00:00:50,250 --> 00:00:52,330
Copilot read the catalogue:

17
00:00:52,510 --> 00:00:54,590
price one hundred, version one.

18
00:00:54,650 --> 00:00:57,510
An actual tool call, beyond a connected
status.

19
00:00:58,340 --> 00:01:01,160
A proposed price of one hundred and
fifty-one was

20
00:01:01,160 --> 00:01:03,380
denied. The catalogue did not change.

21
00:01:03,970 --> 00:01:06,910
A proposal for one hundred and twenty
required human

22
00:01:06,910 --> 00:01:11,270
review. It expired without execution,
exposing a defect in

23
00:01:11,270 --> 00:01:14,820
the recovery path. We fixed the defect,
passed the

24
00:01:14,820 --> 00:01:18,100
same eighty-nine-test suite locally and on
Azure, and verified

25
00:01:18,100 --> 00:01:20,380
the reviewer’s withdrawal of the expired
request.

26
00:01:21,190 --> 00:01:25,570
The intended benefits: bounded delegation,
traceable decisions, human

27
00:01:25,570 --> 00:01:28,650
control, and evidence separating an
intention from an actual

28
00:01:28,650 --> 00:01:33,400
effect. Zero target writes occurred in this
synthetic-data pilot.

29
00:01:33,480 --> 00:01:36,960
Full approval, execution, and replay
verification remain the next

30
00:01:36,960 --> 00:01:39,720
milestone, before production-readiness
claims.

31
00:01:40,410 --> 00:01:43,470
The private preview is open for technical
discussion.

32
00:01:43,710 --> 00:01:47,070
If you build enterprise agents, let’s
challenge it together.

33
00:01:47,830 --> 00:01:50,830
Explore PALO Framework, and help shape the
next operational

34
00:01:50,830 --> 00:01:51,410
case.