[Client Firm] · MEP Engineering · [State]
Executive Summary
Over 14 days, Mantleway audited [████] of project-archive content across [████] active and archived projects, validated the firm's Microsoft 365 hybrid identity configuration, and deployed a working Copilot agent grounded in the firm's RFI history. The agent passed [████]/10 historical-question tests with citations, with [████] identified prerequisite items to be resolved before broader rollout.
What We Audited
Findings
- Proven Microsoft Graph Connector successfully indexed the [████] active-projects share with verified ACL mirroring against existing AD groups. Engineers see exactly what their NTFS permissions allow.
- Caution [████] permission inconsistencies identified in the archived-projects share — broken inheritance, group references no longer in AD, and at least three directories where the ACL no longer matches stated firm policy. Remediation recommended before broader index expansion.
- Do Not The [████] share contains client-confidential drawings governed by NDAs that prohibit AI processing. We recommend explicit exclusion from the connector and a separate governance conversation before any agent has access.
Recommended Next Phases
- Phase 1Permission remediation on the archived-projects share (est. 3 weeks, [████])
- Phase 2Build & deploy three additional agents — Submittal Review, Proposal Drafting, BOD Recall (est. 6 weeks, [████])
- Phase 3Wire agents into Outlook, Teams, and Pipedrive via Power Automate (est. 4 weeks, [████])