The agent action gate
The fictional bank records the exact action and approver.
Coming
See every demonstrationARCHITECTURE, ENGINEERING AND CONSTRUCTION
Every line item explained, every brief approved.
The CFO sees phase one with a price and phase two with a question mark. The project executive finds out the brief was wrong from the owner. Both want the same thing: workflows inside Microsoft 365 with a person at the action and a bill that is explained.
01 Source02 Boundary03 Human decision04 Evidence
HOW IT WORKS
The control path in practice.
- Baseline Azure and Copilot spend by owner, read-only.
- Pick one field-to-office workflow and write its permission row.
- Run it on fictional project data until the approver trusts the draft.
- Switch it on for one project, measure, then widen.
THE WOUND
Why is the CFO and the project executive the same conversation?
Because the brief that reaches the owner and the bill that reaches the CFO come from the same workflows, and both need a person at the action and a line item with an owner.
Phase one with a fixed price and phase two with a question mark is the proposal the CFO rejects. The daily brief that is wrong by the time the superintendent reads it is the one the project executive dreads. Governed Workflows answer both.
THE MICROSOFT INSIGHT
Can a daily brief write itself and still wait for your approval?
Yes: Copilot Cowork carries out multi-step tasks across Microsoft 365 and pauses for the user's approval before sensitive actions, which is where the project executive sits.
Copilot Cowork carries out multi-step tasks across Microsoft 365 and pauses for the user's approval before sensitive actions such as sending an email or posting in Teams. (Microsoft Learn, checked Oct 31, 2026)
Keep the pause and the owner reads an approved brief. Remove it and the owner reads a draft.
THE SAMPLE WORKFLOWS
What do the Contoso Builders workflows do on Harbor Point Tower B?
A safety observation, a certified payroll exception, an RFI and an owner report each move from source to draft to approval to evidence, on fictional data, with a measure to inspect.
- Baseline Azure and Copilot spend by owner, read-only.
- Pick one field-to-office workflow and write its permission row.
- Run it on fictional project data until the approver trusts the draft.
- Switch it on for one project, measure against the baseline, then widen.
THE BILL
Who controls AI spend when business units own the budget?
IT sets the caps and alerts in the Microsoft 365 admin center while the business units own the spend, by user, group, environment or agent.
The Cost management dashboard in the Microsoft 365 admin center lets admins set spending policies and limits for Copilot Credits by user, group, environment or agent, and send threshold alerts. (Microsoft Learn, checked Oct 31, 2026)
Set the caps before the pilot and the invoice is a report. Set them after and the invoice is a meeting.
THE FIRST RUNG
Where do a CFO and a project executive start together?
With the free Copilot readiness check and the two-week read-only Azure Cost Optimization and FinOps Assessment, then the construction Governed Workflows pack on SimpleOS Delivery and Simple Time.
Your data can stay in the construction platform your PMs already use; the workflow reads what the signed-in person may open and writes nothing back without approval. Nobody gets another tool.
AFTER TWO WEEKS
What will be working after two weeks?
- Azure and Copilot spend is baselined by owner, read-only.
- One field-to-office workflow has its permission row and its approver.
- The workflow runs on fictional project data and the approver has seen the first drafts.
- You hold the live-pilot scope for one project and its quote as a written decision.
HONEST ABOUT LIMITS
What this does not do yet
It does not stop the Copilot bill changing on its own. Usage-based billing becomes the default for new Microsoft 365 Copilot Business licenses bought through CSP in Microsoft fiscal year 2027 quarter three, January to March 2027, moved from December 1, 2026 in the November 3, 2026 Partner Center update; the default spending limit stays at 4,000 Copilot Credits for each user each month and admins change it in Partner Center or the Microsoft 365 admin center. (Microsoft Learn, checked Nov 4, 2026) So the spending policies are set before new licenses land, as part of the assessment.
It does not replace your construction platform or your PMs: the workflow drafts, a person approves.
It does not claim a saving: the baseline is yours and no figure appears on this page.
THE ONE THING TO REMEMBER
A person at the action and an owner on every line item.
Said another way: the brief waits for the project executive, and the cap waits for nobody.
Said a third way: one field-to-office workflow, proven on fictional data, switched on for one project.
SHOW YOUR WORK
See the control path on a fictional bank.
DIRECT ANSWERS
Questions before you decide.
Do our PMs have to use another tool?
No. The workflow runs inside Microsoft 365, reads what the signed-in person may already open in your construction platform, and puts a draft in front of the approver.
Who approves when the superintendent is offline?
The permission row names a deputy for each workflow, and anything without an approver waits. Nothing that changes a record or sends a message runs on its own.
Is Contoso Builders a client?
No. Contoso Builders, Harbor Point Tower B and Corliss Bay Construction are fictional and are used in every example so no client is named and no result is implied.
How does the CFO see the AI spend?
As line items with owners in the baseline, with caps and alerts set in the Microsoft 365 admin center before the pilot, and the next bill compared against the baseline.
How is it priced?
Quoted after a scoping call. The assessment is read-only and scoped separately from the construction pack and its switch-on.
NEXT STEP
Start with a boundary you can explain.
Choose a focused check, or speak with the team about the workflow you need to improve.