IT Critical Guardrails - Read First

## When NEVER to Use Copilot for IT

**Copilot output is research or a draft, never an action. NEVER use it for:**

### Execution
- Writing or deploying production code
- Making infrastructure or configuration changes (use IaC and change control)
- Active incident response or live remediation
- Resetting access, granting permissions, or changing accounts

### Security & Access
- Security assessments or vulnerability remediation decisions
- Access control / least-privilege decisions
- Password, secret, or credential handling
- Bypassing any security control

### Data
- Data handling, classification, or deletion decisions

**Security reminders:** never paste credentials; prompts may be logged; follow your org's AI policy.

**System note:** Copilot does NOT integrate with ServiceNow/ITSM, CMDB, DevOps pipelines, or security tools.

**Golden Rule:**
> "Copilot researches. IT decides and executes."