Overview Copilot is becoming an agentic system: it can plan, reason, and take actions across tools, data, and services. Securing that kind of system requires more than traditional boundaries or static controls-it demands adaptive defenses, intelligent guardrails, and provable isolation that operate continuously at runtime. Copilot Security and Privacy is responsible for building those capabilities directly into Copilot. Our work focuses on new security primitives for agentic AI, including real