{
  "format": "agent-article-v0",
  "article_id": "EA-002",
  "canonical_url": "/tools/ea-002-microsoft-ai-microsoft-copilot-copilot-studio-microsoft-foundry-",
  "page_type": "reference",
  "claim_ids": [],
  "evidence_ids": [
    "EVD-EA-002-URL-C22D78E17E81",
    "EVD-EA-002-URL-4F71920867BF",
    "EVD-EA-002-URL-5AB3E1F785E3",
    "EVD-EA-002-URL-F30A44495491",
    "EVD-EA-002-URL-7783C7AB866E",
    "EVD-EA-002-URL-AA963C41F9EC",
    "EVD-EA-002-URL-F57D655CF374",
    "EVD-EA-002-URL-AAC7E9F02B2D",
    "EVD-EA-002-URL-5847C6EE257A",
    "EVD-EA-002-URL-78F825A26268",
    "EVD-EA-002-URL-AE1E682E3D69",
    "EVD-EA-002-URL-666AE6650BF5",
    "EVD-EA-002-URL-4F2A8B7D29C8",
    "EVD-EA-002-URL-EE2F39C2DC69",
    "EVD-EA-002-URL-7856F2515E68",
    "EVD-EA-002-URL-B4EE2DB465BF",
    "EVD-EA-002-URL-57F85BE9A8D6",
    "EVD-EA-002-URL-9339E7FAD20C",
    "EA-002-CURRENT-APPROVAL",
    "EA-002-CURRENT-BODY-READBACK"
  ],
  "unknown_ids": [
    "EA-002-UNKNOWN-01",
    "EA-002-UNKNOWN-02"
  ],
  "operational_object_ids": [],
  "provider": [
    "Microsoft",
    "Copilot"
  ],
  "models": [],
  "plans": [],
  "surfaces": [],
  "regions": [],
  "current_status": "CURRENT",
  "observation_status": "SPEC_ONLY",
  "freshness": "CURRENT",
  "last_verified": "2026-10-11",
  "supersedes": [],
  "superseded_by": [],
  "provenance": [
    "V21-CANDIDATE-EA002-BASE-20261011-C2",
    "SRC-EA-002-URL-C22D78E17E81",
    "SRC-EA-002-URL-4F71920867BF",
    "SRC-EA-002-URL-5AB3E1F785E3",
    "SRC-EA-002-URL-F30A44495491",
    "SRC-EA-002-URL-7783C7AB866E",
    "SRC-EA-002-URL-AA963C41F9EC",
    "SRC-EA-002-URL-F57D655CF374",
    "SRC-EA-002-URL-AAC7E9F02B2D",
    "SRC-EA-002-URL-5847C6EE257A",
    "SRC-EA-002-URL-78F825A26268",
    "SRC-EA-002-URL-AE1E682E3D69",
    "SRC-EA-002-URL-666AE6650BF5",
    "SRC-EA-002-URL-4F2A8B7D29C8",
    "SRC-EA-002-URL-EE2F39C2DC69",
    "SRC-EA-002-URL-7856F2515E68",
    "SRC-EA-002-URL-B4EE2DB465BF",
    "SRC-EA-002-URL-57F85BE9A8D6",
    "SRC-EA-002-URL-9339E7FAD20C",
    "BODY-SHA256:c029cc8aa1e666f3081a42ed418432324005a343ed8478ec3bf9d2ce1d3e3867"
  ],
  "article_sources": [
    {
      "id": "EVD-EA-002-URL-C22D78E17E81",
      "evidence_class": "RESEARCH",
      "title": "author/org: Microsoft",
      "href": "https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-architecture",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-C22D78E17E81"
      ],
      "supporting_locators": [
        "EVIDENCE TABLE",
        "canonical URL: https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-architecture"
      ],
      "scope": "EVIDENCE TABLE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-002-URL-4F71920867BF",
      "evidence_class": "RESEARCH",
      "title": "author/org: Microsoft",
      "href": "https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-privacy",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-4F71920867BF"
      ],
      "supporting_locators": [
        "EVIDENCE TABLE",
        "canonical URL: https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-privacy"
      ],
      "scope": "EVIDENCE TABLE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-002-URL-5AB3E1F785E3",
      "evidence_class": "RESEARCH",
      "title": "author/org: Microsoft",
      "href": "https://learn.microsoft.com/en-us/sharepoint/restricted-content-discovery",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-5AB3E1F785E3"
      ],
      "supporting_locators": [
        "EVIDENCE TABLE",
        "canonical URL: https://learn.microsoft.com/en-us/sharepoint/restricted-content-discovery"
      ],
      "scope": "EVIDENCE TABLE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-002-URL-F30A44495491",
      "evidence_class": "RESEARCH",
      "title": "author/org: Microsoft",
      "href": "https://learn.microsoft.com/en-us/sharepoint/restricted-sharepoint-search",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-F30A44495491"
      ],
      "supporting_locators": [
        "EVIDENCE TABLE",
        "canonical URL: https://learn.microsoft.com/en-us/sharepoint/restricted-sharepoint-search"
      ],
      "scope": "EVIDENCE TABLE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-002-URL-7783C7AB866E",
      "evidence_class": "RESEARCH",
      "title": "author/org: Microsoft Copilot Studio",
      "href": "https://learn.microsoft.com/en-us/microsoft-copilot-studio/requirements-licensing",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-7783C7AB866E"
      ],
      "supporting_locators": [
        "EVIDENCE TABLE",
        "canonical URL: https://learn.microsoft.com/en-us/microsoft-copilot-studio/requirements-licensing"
      ],
      "scope": "EVIDENCE TABLE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-002-URL-AA963C41F9EC",
      "evidence_class": "RESEARCH",
      "title": "author/org: Microsoft Copilot Studio",
      "href": "https://learn.microsoft.com/en-us/microsoft-copilot-studio/guidance/generative-orchestration",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-AA963C41F9EC"
      ],
      "supporting_locators": [
        "EVIDENCE TABLE",
        "canonical URL: https://learn.microsoft.com/en-us/microsoft-copilot-studio/guidance/generative-orchestration"
      ],
      "scope": "EVIDENCE TABLE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-002-URL-F57D655CF374",
      "evidence_class": "RESEARCH",
      "title": "author/org: Microsoft Foundry",
      "href": "https://learn.microsoft.com/en-us/azure/foundry/agents/overview",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-F57D655CF374"
      ],
      "supporting_locators": [
        "EVIDENCE TABLE",
        "canonical URL: https://learn.microsoft.com/en-us/azure/foundry/agents/overview"
      ],
      "scope": "EVIDENCE TABLE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-002-URL-AAC7E9F02B2D",
      "evidence_class": "RESEARCH",
      "title": "author/org: Microsoft",
      "href": "https://learn.microsoft.com/en-us/microsoft-365/copilot/connectors/overview",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-AAC7E9F02B2D"
      ],
      "supporting_locators": [
        "EVIDENCE TABLE",
        "canonical URL: https://learn.microsoft.com/en-us/microsoft-365/copilot/connectors/overview"
      ],
      "scope": "EVIDENCE TABLE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-002-URL-5847C6EE257A",
      "evidence_class": "RESEARCH",
      "title": "author/org: Microsoft Copilot Studio",
      "href": "https://learn.microsoft.com/en-us/microsoft-copilot-studio/publication-add-bot-to-microsoft-teams",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-5847C6EE257A"
      ],
      "supporting_locators": [
        "EVIDENCE TABLE",
        "canonical URL: https://learn.microsoft.com/en-us/microsoft-copilot-studio/publication-add-bot-to-microsoft-teams"
      ],
      "scope": "EVIDENCE TABLE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-002-URL-78F825A26268",
      "evidence_class": "RESEARCH",
      "title": "author/org: Microsoft",
      "href": "https://learn.microsoft.com/en-us/microsoft-365/copilot/copilot-agent-store",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-78F825A26268"
      ],
      "supporting_locators": [
        "EVIDENCE TABLE",
        "canonical URL: https://learn.microsoft.com/en-us/microsoft-365/copilot/copilot-agent-store"
      ],
      "scope": "EVIDENCE TABLE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-002-URL-AE1E682E3D69",
      "evidence_class": "RESEARCH",
      "title": "author/org: GitHub",
      "href": "https://docs.github.com/en/copilot/concepts/enterprise/policies",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-AE1E682E3D69"
      ],
      "supporting_locators": [
        "EVIDENCE TABLE",
        "canonical URL: https://docs.github.com/en/copilot/concepts/enterprise/policies"
      ],
      "scope": "EVIDENCE TABLE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-002-URL-666AE6650BF5",
      "evidence_class": "RESEARCH",
      "title": "author/org: GitHub",
      "href": "https://docs.github.com/en/enterprise-cloud@latest/copilot/how-tos/administer-copilot/manage-for-enterprise/review-audit-logs",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-666AE6650BF5"
      ],
      "supporting_locators": [
        "EVIDENCE TABLE",
        "canonical URL: https://docs.github.com/en/enterprise-cloud@latest/copilot/how-tos/administer-copilot/manage-for-enterprise/review-audit-logs"
      ],
      "scope": "EVIDENCE TABLE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-002-URL-4F2A8B7D29C8",
      "evidence_class": "RESEARCH",
      "title": "author/org: GitHub",
      "href": "https://docs.github.com/en/enterprise-cloud@latest/copilot/concepts/context/content-exclusion",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-4F2A8B7D29C8"
      ],
      "supporting_locators": [
        "EVIDENCE TABLE",
        "canonical URL: https://docs.github.com/en/enterprise-cloud@latest/copilot/concepts/context/content-exclusion"
      ],
      "scope": "EVIDENCE TABLE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-002-URL-EE2F39C2DC69",
      "evidence_class": "RESEARCH",
      "title": "author/org: GitHub",
      "href": "https://docs.github.com/en/copilot/reference/ai-models/model-hosting",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-EE2F39C2DC69"
      ],
      "supporting_locators": [
        "EVIDENCE TABLE",
        "canonical URL: https://docs.github.com/en/copilot/reference/ai-models/model-hosting"
      ],
      "scope": "EVIDENCE TABLE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-002-URL-7856F2515E68",
      "evidence_class": "RESEARCH",
      "title": "Microsoft 365 Copilot release notes, updated through 2026-10-06:",
      "href": "https://learn.microsoft.com/en-us/microsoft-365/copilot/release-notes",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-7856F2515E68"
      ],
      "supporting_locators": [
        "CURRENTNESS_SOURCES",
        "- Microsoft 365 Copilot release notes, updated through 2026-10-06: https://learn.microsoft.com/en-us/microsoft-365/copilot/release-notes"
      ],
      "scope": "CURRENTNESS_SOURCES",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-002-URL-B4EE2DB465BF",
      "evidence_class": "RESEARCH",
      "title": "Copilot Studio billing/Copilot Credits:",
      "href": "https://learn.microsoft.com/en-us/microsoft-copilot-studio/billing-licensing",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-B4EE2DB465BF"
      ],
      "supporting_locators": [
        "CURRENTNESS_SOURCES",
        "- Copilot Studio billing/Copilot Credits: https://learn.microsoft.com/en-us/microsoft-copilot-studio/billing-licensing"
      ],
      "scope": "CURRENTNESS_SOURCES",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-002-URL-57F85BE9A8D6",
      "evidence_class": "RESEARCH",
      "title": "GitHub Copilot enterprise management:",
      "href": "https://docs.github.com/en/copilot/how-tos/administer-copilot/manage-for-enterprise",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-57F85BE9A8D6"
      ],
      "supporting_locators": [
        "CURRENTNESS_SOURCES",
        "- GitHub Copilot enterprise management: https://docs.github.com/en/copilot/how-tos/administer-copilot/manage-for-enterprise"
      ],
      "scope": "CURRENTNESS_SOURCES",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-002-URL-9339E7FAD20C",
      "evidence_class": "RESEARCH",
      "title": "GitHub Copilot content exclusion:",
      "href": "https://docs.github.com/en/copilot/concepts/security-governance-and-network-settings/content-exclusion",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-002-URL-9339E7FAD20C"
      ],
      "supporting_locators": [
        "CURRENTNESS_SOURCES",
        "- GitHub Copilot content exclusion: https://docs.github.com/en/copilot/concepts/security-governance-and-network-settings/content-exclusion"
      ],
      "scope": "CURRENTNESS_SOURCES",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EA-002-CURRENT-APPROVAL",
      "evidence_class": "RESEARCH",
      "title": "現行本文の監査・revision対応",
      "supports": [
        "現行台帳のAUDIT_PASSと候補・revision・本文ハッシュの対応を確認しています。"
      ],
      "limit": "監査状態と来歴の記録です。外部根拠の最新性や本文の全主張を追加保証しません。",
      "origin_class": "AUDITED_CANONICAL_RESEARCH_PACKET",
      "source_or_experiment_ids": [
        "V21-CANDIDATE-EA002-BASE-20261011-C2"
      ],
      "supporting_locators": [
        "1KqhJtiSb2S84rWmeYVwKcT_76dBwZ_B0ZZuAWQqH0rQ",
        "EA_REVISION_LEDGER!A384:U384",
        "EA-002-V21-LEGACY-MIGRATION-20261011-R1"
      ],
      "provenance_status": "CURRENT_CANONICAL_APPROVAL_READBACK"
    },
    {
      "id": "EA-002-CURRENT-BODY-READBACK",
      "evidence_class": "IMPL",
      "title": "現行本文の収録照合",
      "supports": [
        "公開生成入力の本文SHA-256が、監査済み候補に結び付いたハッシュと一致しています。"
      ],
      "limit": "本文の同一性の検査です。外部システムの挙動や全主張の真偽を実証したものではありません。",
      "checked_at": "2026-10-12",
      "origin_class": "IMPLEMENTATION_READBACK",
      "source_or_experiment_ids": [
        "BODY-SHA256:c029cc8aa1e666f3081a42ed418432324005a343ed8478ec3bf9d2ce1d3e3867"
      ],
      "supporting_locators": [
        "content/staging/EA-002.md",
        "c029cc8aa1e666f3081a42ed418432324005a343ed8478ec3bf9d2ce1d3e3867",
        "EA-002-V21-LEGACY-MIGRATION-20261011-R1"
      ],
      "provenance_status": "CURRENT_APPROVED_BODY_HASH_MATCH"
    }
  ],
  "research_sections": [
    {
      "heading": "WHY_THIS_MATTERS_TO_UPDATE",
      "text": "台帳EA-002はMicrosoft 365 Copilot、Copilot Studio、Foundry、GitHub Copilot、Teams、SharePoint、OneDrive等を一つの系統として扱う構想である。2026年9月時点では名称・製品境界・Agent経路が急速に再編されており、Microsoft 365 Copilotは公式文書上「Microsoft Copilot」へ改称中である一方、Copilot Studio、Microsoft Foundry、GitHub Copilotは別ライセンス・別管理面・別監査面を持つ。公開後版では単一の「Microsoft Copilot」機能表ではなく、利用者面・maker面・pro-code runtime面・developer面・data/identity/governance面を分離した系統地図が必要である。"
    },
    {
      "heading": "SCOPE_ROUTING",
      "text": "Enterprise AI Core: identity/permission-aware retrieval、agent governance、connector/data movement、audit/retention、availability gate。\nProvider mapping: Microsoft ecosystem。\nOrganization overlay: Microsoft Entra、Microsoft 365 admin center、Teams/SharePoint/Purview/Power Platform管理、GitHub Enterprise policy。\nInteroperability: Microsoft Graph、Copilot connectors、MCP-based federated connectors、Agent Store/Agent Registry、Teams/Microsoft Copilot publishing。\nImplementation: Copilot Studio standard harness、Microsoft Foundry Agent Service、GitHub Copilot enterprise controls。"
    },
    {
      "heading": "CLAIM_OR_RESEARCH_QUESTION",
      "text": "Q1. Microsoft AI系統は、Microsoft Copilotを中心とする単一製品群としてではなく、複数のruntime・管理面・データ境界を持つ接続系として記述すべきか。\nQ2. M365/Graph/SharePointの既存permissionを尊重することは、oversharingを防ぐ十分条件か。\nQ3. Copilot StudioとFoundryは同じ「agent builder」として同格に比較できるか、それともmaker SaaSとpro-code runtimeとして別レイヤーか。\nQ4. GitHub CopilotはMicrosoft系統に含めつつも、Microsoft 365 tenant governanceとは別のGitHub enterprise policy/audit境界として分離すべきか。"
    },
    {
      "heading": "EVIDENCE TABLE",
      "text": "1) source class: official architecture documentation\nexact title: Microsoft Copilot architecture and how it works\nauthor/org: Microsoft\ncanonical URL: https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-architecture\npublication/update/access: last updated 2026-08-18 / accessed 2026-09-11\nversion/release: current Microsoft Copilot architecture\nevidence label: VERIFIED_SPEC + PRODUCT_VOLATILE\nrelation: support / boundary\nsupporting locator: tenant/service boundary; User prompts and Copilot responses; User access and data privacy; Conditional Access and MFA\nestablished: CopilotはMicrosoft 365 service boundary内でMicrosoft Graphをgroundingに利用するがtenant-wide visibilityを自動取得せず、signed-in userの既存権限を境界とする。Conditional Access/MFAも既存M365制御を継承する。\n\n\n2) source class: official privacy/security documentation\nexact title: Data, Privacy, and Security for Microsoft Copilot\nauthor/org: Microsoft\ncanonical URL: https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-privacy\npublication/update/access: last updated 2026-07-09 / accessed 2026-09-11\nversion/release: current; document states Microsoft 365 Copilot is now named Microsoft Copilot\nevidence label: VERIFIED_SPEC + PRODUCT_VOLATILE\nrelation: support / limit / naming-change\nsupporting locator: introductory Note; organizational data; stored interaction data; extensibility; connected experiences controls\nestablished: prompts/responses/Graph-accessed dataはfoundation LLM trainingに使われない。interaction contentは保存され、Purview retention/eDiscovery対象となり得る。agents/Graph connectorsは拡張経路であり、admin permissionとagent側terms/privacyの確認が必要。connected experiences privacy controlsを無効化すると一部Copilot機能自体が利用不能になる。名称移行中で旧称が資料・license・capabilityに残る。\n\n\n3) source class: official SharePoint governance documentation\nexact title: Restrict discovery of SharePoint sites and content\nauthor/org: Microsoft\ncanonical URL: https://learn.microsoft.com/en-us/sharepoint/restricted-content-discovery\npublication/update/access: last updated 2026-08-18 / accessed 2026-09-11\nversion/release: Restricted Content Discovery current\nevidence label: VERIFIED_SPEC + PRODUCT_VOLATILE\nrelation: counter / limit / governance\nsupporting locator: notes/caution; prerequisites; propagation; FAQ\nestablished: RCDはdiscoverabilityを制限するが既存permissionsを変更しない。SharePoint siteだけが対象でOneDrive sites非対応。過剰適用はCopilot responseの完全性・関連性を下げ得る。500,000 items超のsiteでは反映に1週間超かかる場合がある。よって「permission-respecting=oversharing解決済み」は成立しない。\n\n\n4) source class: official retirement/governance documentation\nexact title: Restricted SharePoint Search\nauthor/org: Microsoft\ncanonical URL: https://learn.microsoft.com/en-us/sharepoint/restricted-sharepoint-search\npublication/update/access: accessed 2026-09-11; new enablement blocked from 2026-07-31\nevidence label: VERIFIED_SPEC + PRODUCT_VOLATILE\nrelation: counter / migration-limit\nsupporting locator: retirement notice; What is Restricted SharePoint Search; Why disable after validation\nestablished: RSSは短期対策でsecurity boundaryではなく、2026-07-31から新規enablementがblocked。長期策としてRCD、SharePoint Advanced Management、Purview等へ移行する必要がある。公開後辞典ではRSSを現行推奨策として固定しない。\n\n\n5) source class: official Copilot Studio licensing/access documentation\nexact title: Assign user licenses and manage access\nauthor/org: Microsoft Copilot Studio\ncanonical URL: https://learn.microsoft.com/en-us/microsoft-copilot-studio/requirements-licensing\npublication/update/access: last updated 2026-08-03 / accessed 2026-09-11\nversion/release: current standard harness licensing\nevidence label: VERIFIED_SPEC + PRODUCT_VOLATILE\nrelation: support / availability gate / cost\nsupporting locator: required tenant+user licenses; Teams plan; trial; subscription capacity\nestablished: Copilot Studio maker accessはtenant licenseとuser license等に依存する。Teams planはclassic orchestration中心で、standaloneとはgenerative orchestration・premium connectors・channels等が異なる。trialでは作成/テストは可能でもpublish不可。agent利用者とmakerのlicense要件も同一ではない。\n\n\n6) source class: official Copilot Studio implementation guidance\nexact title: Apply generative orchestration capabilities\nauthor/org: Microsoft Copilot Studio\ncanonical URL: https://learn.microsoft.com/en-us/microsoft-copilot-studio/guidance/generative-orchestration\npublication/update/access: last updated 2026-08-27 / accessed 2026-09-11\nversion/release: current standard harness\nevidence label: VERIFIED_SPEC\nrelation: support / implementation\nsupporting locator: generative orchestration; autonomous capabilities; multi-agent orchestration; custom knowledge\nestablished: Copilot StudioはLLM-based orchestrationでtopics/actions/knowledgeを選択し、event-driven autonomous agent、multi-agent coordination、custom knowledge integrationまで扱う。単なるM365 Copilotのprompt extensionではない。\n\n\n7) source class: official pro-code agent runtime documentation\nexact title: What is Microsoft Foundry Agent Service?\nauthor/org: Microsoft Foundry\ncanonical URL: https://learn.microsoft.com/en-us/azure/foundry/agents/overview\npublication/update/access: last updated 2026-08-19 / accessed 2026-09-11\nversion/release: current Foundry Agent Service\nevidence label: VERIFIED_SPEC + PRODUCT_VOLATILE\nrelation: support / implementation / boundary\nsupporting locator: Agent Service at a glance; Agent types; Security, privacy, and compliance\nestablished: Foundry Agent ServiceはAgent Runtime、toolboxes/MCP、model catalog、observability/evaluations、Entra/RBAC/VNet、versioned publishingを備える。prompt agentsとhosted agentsを提供し、Teams/Microsoft Copilot/Entra Agent Registryへpublish可能。Copilot Studioと接続可能だが、hosting/scaling/identity/observabilityを含むpro-code runtimeとして独立レイヤーを持つ。\n\n\n8) source class: official connector architecture documentation\nexact title: Copilot connectors overview\nauthor/org: Microsoft\ncanonical URL: https://learn.microsoft.com/en-us/microsoft-365/copilot/connectors/overview\npublication/update/access: last updated 2026-08-04 / accessed 2026-09-11\nversion/release: current Copilot connectors\nevidence label: VERIFIED_SPEC + PRODUCT_VOLATILE\nrelation: support / interoperability\nsupporting locator: connector architecture; prebuilt/custom connectors\nestablished: 外部データ接続にはsynced connectorとfederated connector系統があり、syncedはMicrosoft Graphへ取り込み/semantic indexing、federatedはMCPを使うquery-time retrievalでsource側にデータを残す。データ移動・index・authentication・availabilityが異なるため「connector」を単一方式として扱えない。\n\n\n9) source class: official publishing/distribution documentation\nexact title: Connect and configure an agent for Teams and Microsoft 365 Copilot\nauthor/org: Microsoft Copilot Studio\ncanonical URL: https://learn.microsoft.com/en-us/microsoft-copilot-studio/publication-add-bot-to-microsoft-teams\npublication/update/access: accessed 2026-09-11\nevidence label: VERIFIED_SPEC + PRODUCT_VOLATILE\nrelation: support / availability gate\nsupporting locator: install; share link; Teams app store / Microsoft 365 Agent Store; admin approval\nestablished: agentのpublish、userへのshare、organization catalogへの展開は別工程であり、organization-wide availabilityにはadmin approvalが関わる。作成済み・publish済み・利用可能・組織配布済みを同一状態として扱えない。\n\n\n10) source class: official agent governance documentation\nexact title: Agent Store in Microsoft Copilot\nauthor/org: Microsoft\ncanonical URL: https://learn.microsoft.com/en-us/microsoft-365/copilot/copilot-agent-store\npublication/update/access: last updated 2026-04-20 / accessed 2026-09-11\nversion/release: current Agent Store / Agent 365 path\nevidence label: VERIFIED_SPEC + PRODUCT_VOLATILE\nrelation: support / governance / interoperability\nsupporting locator: admin approval; Agent 365 SDK integration\nestablished: Agent Storeにはadmin approvalがあり、Copilot Studio/Foundry/OpenAI Agents SDK/custom code等で構築したagentをAgent 365 SDK経由でEntra-backed identity、managed MCP、observability等へ接続する経路が示される。Microsoft系統は自社builderだけを閉じた世界として記述すべきでない。\n\n\n11) source class: official GitHub enterprise governance documentation\nexact title: GitHub Copilot policies for enterprises and organizations\nauthor/org: GitHub\ncanonical URL: https://docs.github.com/en/copilot/concepts/enterprise/policies\npublication/update/access: accessed 2026-09-11\nevidence label: VERIFIED_SPEC + PRODUCT_VOLATILE\nrelation: support / boundary / availability gate\nsupporting locator: policy hierarchy; user licenses; supported surfaces; policy drift\nestablished: GitHub Copilot Business/EnterpriseはGitHub enterprise/organizationのAI controlsでfeatures/agents/models/clientを統制する。複数organization/enterpriseのpolicy競合ルールがあり、IDE/GitHub web/CLIで適用surfaceも同一ではない。M365 admin policyと混ぜず別管理面にする必要がある。\n\n\n12) source class: official GitHub audit documentation\nexact title: Reviewing audit logs for GitHub Copilot\nauthor/org: GitHub\ncanonical URL: https://docs.github.com/en/enterprise-cloud@latest/copilot/how-tos/administer-copilot/manage-for-enterprise/review-audit-logs\npublication/update/access: accessed 2026-09-11\nversion/release: current GitHub Enterprise Cloud\nevidence label: VERIFIED_SPEC\nrelation: support / audit-limit\nsupporting locator: logged events; client-session exclusion; retention\nestablished: enterprise audit logはpolicy/license changesとGitHub website agent activity等を記録するが、local Copilot prompt等のclient session dataは含まれず、必要ならcustom hooks等の別収集が必要。audit coverageはsurfaceごとに差がある。\n\n\n13) source class: official GitHub content-control documentation\nexact title: Content exclusion for GitHub Copilot\nauthor/org: GitHub\ncanonical URL: https://docs.github.com/en/enterprise-cloud@latest/copilot/concepts/context/content-exclusion\npublication/update/access: accessed 2026-09-11\nversion/release: current; some surfaces public preview\nlabel: VERIFIED_SPEC + PRODUCT_VOLATILE\nrelation: counter / failure envelope\nsupporting locator: availability; limitations\nestablished: content exclusionはBusiness/Enterpriseで利用可能だが、surface差があり、Edit/Agent modes等で非対応の場合がある。IDEから間接的に得たsemantic information等を完全遮断する保証でもない。Microsoft系統全体の「content governance」を一つの万能controlとして表現できない。\n\n\n14) source class: official GitHub model hosting/data-boundary documentation\nexact title: Hosting of models for GitHub Copilot\nauthor/org: GitHub\ncanonical URL: https://docs.github.com/en/copilot/reference/ai-models/model-hosting\npublication/update/access: accessed 2026-09-11\nversion/release/model: current multi-provider model catalog; provider/model-dependent retention terms\nevidence label: VERIFIED_SPEC + PRODUCT_VOLATILE\nrelation: support / limit / data-boundary\nsupporting locator: provider hosting and retention sections\nestablished: GitHub Copilot内部でもOpenAI/Anthropic/Google等の複数model providerが使われ、provider/model/preview状態によりZDRやretention条件が異なり得る。Microsoft ecosystemだからdata pathがMicrosoft単独で閉じるとは限らない。"
    },
    {
      "heading": "FINDINGS",
      "text": "EA-002は採用価値が高いが、章構造は製品一覧ではなく「六面図」にするのが安全である。\nA. End-user productivity plane: Microsoft Copilot + Word/Excel/PowerPoint/Outlook/Teams等。Microsoft Graphとuser permissionでgrounding。\nB. Maker/low-code agent plane: Copilot Studio。agent作成、knowledge/actions、generative orchestration、Power Platform/Teams接続、publishing。\nC. Pro-code/model/runtime plane: Microsoft Foundry。model catalog、agent hosting/runtime、tools/MCP、identity/network、observability/evaluation。\nD. Developer-assistance plane: GitHub Copilot。GitHub enterprise/org policy、IDE/web/CLI、model-provider policy、独自audit/content controls。\nE. Data/retrieval plane: Microsoft Graph、SharePoint/OneDrive、Copilot connectors。synced indexとfederated/MCP retrievalを分離。\nF. Governance/distribution plane: Entra、M365 admin、Purview、SharePoint governance、Agent Store/Agent Registry、Teams distribution、GitHub AI controls。\nこれらは相互接続するが、license、admin authority、audit coverage、data path、availability gateを共有しない場合がある。したがって「Microsoft製AI」の一語で統合すると運用判断を誤る。\n\n\n重要な反証は、permission-aware retrievalがoversharingを自動修復しない点である。Copilotは既存permissionを尊重するが、既存permission自体が広すぎれば広すぎる範囲を正しく利用する。RCD/RSS/SAM/Purview等の治理はpermission modelとは別レイヤーである。\n\n\nまた名称変動が大きい。2026-07-09更新のMicrosoft文書は「Microsoft 365 Copilot is now named Microsoft Copilot」と明記する一方、URL、license、他文書には旧称が残る。辞典の索引はcurrent canonical name + historical/transition aliasを併記する必要がある。"
    },
    {
      "heading": "LIMITS / COUNTEREVIDENCE / FAILURE ENVELOPE",
      "text": "- Microsoft製品間で「Copilot」「agent」「connector」「MCP」という語が共通でも、security boundary、runtime、license、admin surface、audit coverageは同一ではない。\n- Microsoft Copilotがuser permissionを尊重しても、overshared site/fileはuserに許可済みであるためCopilotにも見える。permission-awareはdata hygieneの代替ではない。\n- RCDはpermissionsそのものを変えず、OneDrive sites非対応、反映遅延もあり得る。RSSはretiringでsecurity boundaryではない。\n- Copilot Studio trial/Teams plan/standaloneはcapability差が大きい。maker accessとend-user accessを混同しない。\n- Foundryの多model/外部model接続、GitHub Copilotのmulti-provider hostingにより「Microsoft系=Microsoft modelのみ」は誤り。\n- GitHub Copilot content exclusionは全surface/agent modeへの完全適用ではない。policy/auditもsurface差がある。\n- Foundry/Agent 365/Agent Registry/Frontier系は2026年に変動が速く、公開直前再確認が必要。"
    },
    {
      "heading": "AVAILABILITY_GATES",
      "text": "Microsoft Copilot: M365 subscription/entitlement、user identity、Graph permissions、connected-experience privacy controls、admin-enabled agents、region/data-residency条件。\nCopilot Studio: tenant/user licenseまたは該当entitlement、Power Platform environment、Teams plan vs standalone、capacity/Copilot Credits、publish permission、channel/admin approval。\nFoundry: Azure subscription/project、model availability、region、Entra/RBAC、network/resource configuration、preview/GA状態。\nCopilot connectors: connector type、Entra/app registration、admin consent、source credentials、sync/federated availability、government/cloud environment差。\nGitHub Copilot: Business/Enterprise seat、enterprise/org AI policies、client/surface、model policy、data-residency/FedRAMP constraints、provider/model retention条件。\nAgent distribution: share/publish/catalog submission/admin approval/installationは別状態。"
    },
    {
      "heading": "IMPLEMENTATION_STATE",
      "text": "Microsoft Copilot: production SaaS orchestration/service boundary。\nCopilot Studio: maintained low-code/maker agent platform。standard harnessでgenerative/multi-agent/autonomous capabilitiesを提供。\nMicrosoft Foundry Agent Service: maintained pro-code agent runtime/hosting/evaluation/identity platform。prompt agentとhosted agentを分離。\nCopilot connectors: production integration architecture。synced Graph indexingとfederated MCP retrievalの二方式。\nAgent Store/Agent Registry/Agent 365: cross-platform governance/distribution layerだが2026年の変動が大きくPRODUCT_VOLATILE。\nGitHub Copilot: production developer AI platform with separate enterprise governance surface。"
    },
    {
      "heading": "BENCHMARK_OR_EVAL",
      "text": "本RUNでは能力benchmarkを行わない。EA-002の目的はecosystem topologyとgovernance boundaryの確定であり、model性能をMicrosoft製品性能へ外挿しない。将来比較する場合は、(1) task completion、(2) permission leakage/oversharing exposure、(3) connector freshness/latency、(4) agent tool-call success、(5) audit completeness、(6) policy propagation latencyを製品面ごとに独立評価する。"
    },
    {
      "heading": "SECURITY / PRIVACY / AUDIT / COST / OPERABILITY",
      "text": "Security: identity/permission boundaryとdiscoverability/data hygieneを分離。Entra/M365/Power Platform/GitHub policyのauthority mapを持つ。\nPrivacy: foundation-model training非利用の約束と、interaction retention/eDiscovery、外部agent/provider termsを別項目にする。\nAudit: M365/PurviewとGitHub auditは別系統。client/local sessionが標準auditに含まれないsurfaceもある。\nCost: M365 entitlement、Copilot Studio Credits/capacity、Azure/Foundry consumption、GitHub AI Credits/seatを統合単価にしない。\nOperability: create→test→publish→share→catalog/admin approve→install/useを状態機械として分離。policy/connector/index propagation delayを即時反映と仮定しない。"
    },
    {
      "heading": "SAFE_WORDING_FOR_FUTURE_BOOK",
      "text": "「Microsoftの法人向けAIは、一つのCopilot製品ではなく、複数の運用面が接続した系統として見る方が安全である。Microsoft CopilotはMicrosoft 365の権限とGraphを使う利用者面、Copilot Studioは業務エージェントを組み立てるmaker面、Microsoft Foundryはモデル・ツール・実行・観測を扱うpro-code面、GitHub Copilotは開発者向けの別管理面を持つ。これらはTeams、SharePoint、Graph、MCP、Agent Store等で接続できるが、ライセンス、管理者、監査、データ経路、利用可能条件まで同一になるわけではない。特に『既存権限を尊重する』ことと『既存データが適切に権限設定されている』ことは別問題である。」"
    },
    {
      "heading": "UPDATE_WORK_HANDOFF",
      "text": "1. 公開直前にMicrosoft naming mapを再採集し、Microsoft Copilot / Microsoft Copilot Chat / legacy Microsoft 365 Copilot表記、Copilot Studio、Foundry、Agent 365、Agent Registryのcanonical名を固定する。\n2. 六面図を章の主構造候補とし、各面に「identity / data source / runtime / admin authority / audit / billing meter / publication path / region」を列として持つ。\n3. M365 data planeはSharePoint、OneDrive、Teams、Exchange/Outlook、Graph、Copilot connectorsを分離し、native Graph content / synced external content / federated MCP contentのdata movementを図示する。\n4. permission-aware retrieval節には必ずoversharing counterexampleとRCD/RSSの限界を併記する。RSSはretirement history扱いとしcurrent recommendationから外す。\n5. Copilot StudioはTeams plan / standalone / trial / M365-integrated agent entitlementを公開時点で再照合し、maker vs consumer licenseを分離する。\n6. FoundryはAgent Service、model catalog、Responses/API/toolbox、Hosted Agent、observability、Entra/RBAC/VNet、M365/Teams publishingを再確認する。preview機能は固定本文へ埋め込まない。\n7. GitHub CopilotはMicrosoft 365 governanceへ吸収せず独立subchapterにする。enterprise/org policy conflict、model/provider hosting、content exclusion surface差、audit gap、AI Creditsを更新表へ置く。\n8. Agent Store/Agent Registry/Agent 365 SDKは「Microsoft内外のagentを治理・配布へ接続する層」として再採集し、Copilot Studio専用品と誤記しない。\n9. TEST_PROFILE候補: 認証済みtenant実験はこのRUNでは未実施。後続Workで安全に実施可能なら、同じSharePoint権限セットでMicrosoft Copilot/SharePoint agent/Copilot Studio agentの可視content差、RCD propagation、publish→admin approval→user availability、audit log coverageを比較する。\n10. 接続候補: EA-005 MCP実践辞典、EA-006 agent ecosystem、EA-012公称能力vs実効能力、EA-021権限付き検索、EA-036 permission-aware retrieval、EA-054 agent identity、EA-055 multi-agent governance、EA-147 Copilot Studioへcross-reference。"
    },
    {
      "heading": "OPEN_UNKNOWN",
      "text": "/ STOP_CONDITION"
    },
    {
      "heading": "OPEN_UNKNOWN",
      "text": "- 2026-09-11時点のAgent 365/Entra Agent Registryの全license/Frontier availabilityとGA/preview境界。\n- FoundryからMicrosoft Copilot/Teams/Agent Storeへpublishする全経路のregion/tenant別可用性。\n- Microsoft Copilotの各app surfaceでのexact model routingと第三者model選択条件。\n- Copilot Studioの全Copilot Credit消費率、agent type/tool別meter。\n- GitHub Copilotの各client/agent modeに対するcontent exclusion/audit/data-residencyの完全matrix。\n- 特定tenantでのRCD/index/policy propagation実測値。"
    },
    {
      "heading": "STOP_CONDITION",
      "text": "EA-002の公開後章構造に必要なtopology、主要security/data/governance境界、Copilot Studio/Foundry/GitHubの別管理面、SharePoint oversharing反証まで一次資料で確立した。全SKU・全価格・全preview機能の固定はPRODUCT_VOLATILE化が早いため今回のbounded unitでは行わない。次の未調査最小番号はEA-003 Apple Intelligence／オンデバイスAI編。"
    },
    {
      "heading": "CURRENTNESS_SOURCES",
      "text": "- Microsoft 365 Copilot release notes, updated through 2026-10-06: https://learn.microsoft.com/en-us/microsoft-365/copilot/release-notes\n- Copilot Studio licensing/access: https://learn.microsoft.com/en-us/microsoft-copilot-studio/requirements-licensing\n- Copilot Studio billing/Copilot Credits: https://learn.microsoft.com/en-us/microsoft-copilot-studio/billing-licensing\n- Microsoft Foundry Agent Service: https://learn.microsoft.com/en-us/azure/foundry/agents/overview\n- GitHub Copilot enterprise management: https://docs.github.com/en/copilot/how-tos/administer-copilot/manage-for-enterprise\n- GitHub Copilot content exclusion: https://docs.github.com/en/copilot/concepts/security-governance-and-network-settings/content-exclusion\n- GitHub Copilot audit logging: https://docs.github.com/en/enterprise-cloud@latest/copilot/how-tos/administer-copilot/manage-for-enterprise/review-audit-logs"
    },
    {
      "heading": "CURRENTNESS_FINDINGS",
      "text": "1. Microsoft 365 Copilot continues active staged rollout; the 2026-10-06 release notes explicitly describe gradual tenant rollout. This reinforces the packet's rule that availability is not a static tenant-wide yes/no.\n2. Copilot Studio still has separate maker/user and tenant licensing concepts, Teams/trial boundaries, and Copilot Credits/capacity. Trial access can permit building/testing while publication remains restricted. This reinforces maker/consumer/license separation.\n3. Microsoft Foundry Agent Service is a distinct managed pro-code agent platform with its own runtime, toolboxes, model catalog, identity/network/data controls and publishing/distribution paths. Current docs describe distribution to Microsoft 365 Copilot, Teams and Entra Agent Registry and separate protocol surfaces, so it must not be collapsed into the M365 end-user Copilot surface.\n4. GitHub Copilot remains a separate enterprise governance plane. Enterprise owners can control models/features/policies; content exclusion has repository/organization/enterprise policy surfaces; audit logs cover policy/license/website-agent events but do not include local client prompt/session data. This supports the packet's warning against assuming one unified Microsoft audit plane.\n5. Product naming and packaging remain PRODUCT_VOLATILE. This supplement does not freeze every SKU, exact model route, price or preview feature."
    },
    {
      "heading": "CURRENTNESS_COUNTEREVIDENCE_LIMIT",
      "text": "Current product documentation strengthens the multi-plane topology but also shows that features, publication paths, billing and audit coverage keep changing. Therefore the candidate must preserve an as-of boundary and must not promote a single naming map or license matrix into a durable invariant.\n\nRESEARCH_GATE:\nPASS_FOR_BOUNDED_BASE_REVISION — the canonical packet already contains exact topic, claim-level evidence, scope routing, counterevidence/failure envelope, availability gates, security/privacy/audit/cost/operability, SAFE_WORDING and OPEN_UNKNOWN; the 2026-10-11 supplement refreshes the volatile Microsoft/GitHub control-plane boundaries. No tenant live test or independent audit is claimed.\n\nCANDIDATE_IMPLEMENTATION_OVERLAY:"
    }
  ],
  "human_url": "/tools/ea-002-microsoft-ai-microsoft-copilot-copilot-studio-microsoft-foundry-",
  "markdown_url": "/agent/article.md?path=%2Ftools%2Fea-002-microsoft-ai-microsoft-copilot-copilot-studio-microsoft-foundry-",
  "json_url": "/agent/article.json?path=%2Ftools%2Fea-002-microsoft-ai-microsoft-copilot-copilot-studio-microsoft-foundry-"
}