Copilot Posture Sandbox

Configure your tenant. Compare current state vs proposed. See what shifts in regulatory exposure, Microsoft controls, and the architecture itself. Built for Change Control Boards reviewing config changes and external auditors who want every claim traced to a Microsoft public document. v0.5 — dynamic diagram + comparison + exports.

Configurator data baselined 2026-05-08 · By Mogambo · Companion to the M365 E5 Copilot Architecture research piece

Loading configurator data…

How this tool stays honest

Every claim the side panel asserts comes from a citation in citations.json, with a verified Microsoft public-doc URL and a last-fact-checked date. The classification field on each claim — contractual posture, architectural guarantee, technical control, or regulatory mandate — discloses what kind of evidence backs the claim. A regulator can't push back on the classification; they can push back on whether it's the right one. That's the point.

This is a v0.2 manual-stamp build. An auto-fact-check job that pulls Microsoft Trust Center / sub-processor list / DPA revisions on a schedule is the next iteration. Until then: re-verify the citation set quarterly. Last verified: 2026-05-08.

Apply under the supervision of Legal, Compliance, and Risk. Send pushback to mogambo@mogambo.info.

Tell Mogambo about this tool

Tool-design feedback (v0.5 preview): which knob is missing? Is a classification (contractual posture / architectural guarantee / technical control / regulatory mandate) used incorrectly? What would change your behavior at v1.0?

Your feedback

Name (optional)

Email (optional, for follow-up)

Form not working? Email mogambo@mogambo.info directly.