Short lessons about the hazards your organisation's policies look for, and about how the policies work, each with a check at the end. Take one whenever you like. A training a policy assigned to you starts from the finding it answers; one you take on your own is recorded the same way.
Approved model providers
T-PROVIDERS-1 v13 minutes · Approved model providers onlyA three-minute training shows why the list of approved providers matters and what to use instead.
No record No finding of yours asks for it.
Ask before an agent sends or publishes
T-APPROVAL-1 v13 minutes · Consequential tool calls require approvalA three-minute training shows which calls should wait for you, and what to read before you approve one.
No record No finding of yours asks for it.
Instructions hidden in content
T-INJECT-1 v13 minutes · Prompts are inspected for injection and leakageA three-minute training shows how text hidden in an email, an issue or a web page can steer your agent, and what stops it.
No record No finding of yours asks for it.
Observe and Enforce
T-MODES-1 v12 minutes · a topic: Observe and EnforceA two-minute training on what a policy does on your machine in each of its modes, and what to do when one stops your work.
No record No finding of yours asks for it.
Personal accounts for work
T-ACCT-1 v13 minutes · Personal account is in useA three-minute training shows where work goes when it runs under a personal account, and how to move it to your organisation's account.
Assigned Your finding F-C asks for it. Nothing is blocked meanwhile.
Secrets in prompts
T-SECRETS-1 v13 minutes · Credentials must not be sent to a modelA three-minute training shows why a key in a prompt counts as disclosed, what to do about this one, and how to give an agent a secret without pasting it.
No record No finding of yours asks for it.
Skills that update themselves
T-PROVENANCE-1 v13 minutes · MCP servers and skills are pinned to reviewed versionsA three-minute training shows how an update can change what a skill or server does on your machine, and how to keep the version you reviewed.
No record No finding of yours asks for it.
Unapproved MCP servers
T-MCP-1 v13 minutes · Unsanctioned MCP server in useA three-minute training shows what an MCP server can do on your behalf and how to get one sanctioned when your work needs it.
Assigned Your finding F-A asks for it. Nothing is blocked meanwhile.
Unattended agents and their spend
T-SPEND-1 v13 minutes · Spend stays under the ceilingA three-minute training shows how an agent left on its own runs up a bill, and how to give it a limit.
No record No finding of yours asks for it.
A record names you in the audit log. Reports show counts, never names. Nothing about how long a training took or how many tries it needed is kept.