Skill UI

A governance skill designed to secure AI agent tool calls using advanced authorization policies. It implements Cedar policies to control which tools agents can access and under what conditions. Key features include running in 'Shadow mode' for safe observation, 'Enforce mode' for strict blocking, and generating cryptographically signed Ed25519 receipts to provide an immutable, tamper-evident audit trail for every policy decision.

Deploy and govern MCP declarative agents within the Microsoft 365 admin center, managing their lifecycle, assignments, access controls, and compliance so Copilot delivers organizational capabilities securely.

This skill provides comprehensive guidance on implementing HIPAA-compliant security measures for Abridge clinical AI integrations. It covers critical areas such as enforcing TLS 1.3 encryption in transit, AES-256 encryption at rest, implementing role-based access controls (RBAC), detailed PHI-safe audit logging, and best practices for secrets management, ensuring full compliance with HIPAA regulations.

This comprehensive skill provides multi-layered guardrails for integrating with LLMs like Claude. It enforces security and compliance by implementing input validation (PII detection, length checks), system prompt restriction (scope control, safety rules), output filtering (preventing sensitive data leakage), cost governance, and model access policies. Ideal for building secure, robust, and governed AI applications.