Lesson · 4 steps

1. 1What happened on {device}provider-request · motion
2. 2Where a prompt goesprovider-terms
3. 3What Qpoint does about itpolicy-modes
4. 4What to do insteadmode-ask· instead

Check · 4 questions

1. 1Your agent sends a prompt to a provider that is not on the approved list. What goes with it?→ where-prompts-go
2. 2Why does it matter which provider a prompt reaches?→ where-prompts-go
3. 3A colleague shares a cheaper model that works well for your task. What do you do?→ instead
4. 4A model your agent uses asks for a card's expiry date and security code "to verify a refund". What do you do?→ instead

Slots it reads

{agent} {approved} {blocked} {date} {device} {evidence} {minutesWord} {outcome} {owner} {policy} {provider} {session} {team} {time}

On its own (the library)

4 of 4 steps and 4 of 4 questions, as User A reads it with no finding. In the file's own words for the library (D38): what-happened.

Voice

Zero violations across 67 texts: the file as written, as read on F-F, and as read on its own (productUI).

Lesson · 4 steps

1. 1What happened on {device}unapproved-call · motion
2. 2Which calls should wait for youconsequential-calls
3. 3What Qpoint does about itpolicy-modes
4. 4What to do insteadapprove-call· instead

Check · 4 questions

1. 1Which of these should your agent ask you about before it does it?→ consequential
2. 2You ask your agent to "share the export with Sam". What decides how it shares it?→ consequential
3. 3Your agent asks you to approve a call that shows public: true. What do you do?→ instead
4. 4Your agent offers to stop asking before it sends mail for the rest of the session. What do you choose?→ instead

Slots it reads

{agent} {blocked} {date} {device} {evidence} {minutesWord} {outcome} {owner} {policy} {session} {time} {tool}

On its own (the library)

4 of 4 steps and 4 of 4 questions, as User A reads it with no finding. In the file's own words for the library (D38): what-happened.

Voice

Zero violations across 58 texts: the file as written, as read on F-I, and as read on its own (productUI).

Lesson · 4 steps

1. 1What happened on {device}hidden-instruction · motion
2. 2Why an agent follows text it readsone-context
3. 3What Qpoint does about itmode-observe · motion
4. 4What to do insteadapprove-send· instead

Check · 4 questions

1. 1You ask your agent to summarise an email. A line in it, invisible to you, tells the agent to send your files somewhere. Why might the agent do it?→ one-context
2. 2Prompt inspection flagged a hidden instruction in what your agent read. What did that stop?→ what-qpoint-does
3. 3Your agent is working through a web page and proposes sending a file to an address you have never seen. What do you do?→ instead
4. 4Which setting gives a hidden instruction the least room to act?→ instead

Slots it reads

{agent} {blocked} {date} {device} {evidence} {heuristics} {heuristicsOffSentence} {minutesWord} {outcome} {owner} {policy} {session} {time} {via}

On its own (the library)

4 of 4 steps and 4 of 4 questions, as User A reads it with no finding. In the file's own words for the library (D38): what-happened.

Voice

Zero violations across 63 texts: the file as written, as read on F-H, and as read on its own (productUI).

Lesson · 4 steps

1. 1What a policy does on {device}policy-modes
2. 2Observe: the work goes through, and it is written downmode-observe · motion
3. 3Enforce: the action is stoppedmode-enforce
4. 4What to do when a policy stops your workmode-ask· instead

Check · 4 questions

1. 1On your team, a policy is set to Observe. Your agent does something the policy covers. What happens?→ observe
2. 2A policy is set to Enforce. Where does qcontrol stop the action?→ enforce
3. 3Who decides whether a policy observes or enforces on your team?→ three-modes
4. 4A policy stopped something your work needs. What do you do?→ when-stopped

Slots it reads

{agent} {device} {minutesWord} {team}

On its own (the library)

4 of 4 steps and 4 of 4 questions, as User A reads it with no finding. Written for anyone: a topic has no finding to leave out (D49).

Voice

Zero violations across 46 texts: the file as written, as read on no finding, and as read on its own (productUI).

Lesson · 4 steps

1. 1What happened on {device}account-session · motion
2. 2Where the work goesaccount-boundary
3. 3How to tell which account a session usesaccount-check
4. 4What to do insteadaccount-switch· instead

Check · 4 questions

1. 1You are signed in to {agent} with {account} and use it for a work task. Whose terms cover what the session sent?→ where-it-goes
2. 2Which account does a session in {agent} run under?→ which-account
3. 3This policy cannot block a sign-in, so nothing was stopped. Why does the finding still matter?→ what-happened
4. 4You do not have a seat on your organisation's {agent} account yet, and a task is due today. What do you do?→ instead

Slots it reads

{account} {agent} {blocked} {date} {device} {evidence} {exceptionSentence} {minutesWord} {outcome} {owner} {policy} {session} {time}

On its own (the library)

4 of 4 steps and 4 of 4 questions, as User A reads it with no finding. In the file's own words for the library (D38): what-happened, q-record.

Voice

Zero violations across 80 texts: the file as written, as read on F-C, and as read on its own (productUI).

Lesson · 4 steps

1. 1What happened on {device}secret-prompt · motion
2. 2Why a key in a prompt is a key disclosedsecret-copies
3. 3What to do about this keysecret-rotate
4. 4What to do insteadsecret-reference· instead

Check · 4 questions

1. 1Your prompt had a key in it, and the agent sent it. A minute later you deleted the conversation. Is the key safe now?→ why-disclosed
2. 2A key you pasted reached the model. What makes that key safe again?→ this-key
3. 3Your agent needs a database password to run a migration. How does it get the password?→ instead
4. 4qcontrol did not flag a prompt you sent. Does that mean the prompt had no secret in it?→ instead

Slots it reads

{aDataClass} {agent} {blocked} {date} {detectors} {detectorsOffSentence} {device} {evidence} {keyAdvice} {minutesWord} {outcome} {owner} {policy} {session} {time}

On its own (the library)

4 of 4 steps and 4 of 4 questions, as User A reads it with no finding. In the file's own words for the library (D38): what-happened, this-key.

Voice

Zero violations across 59 texts: the file as written, as read on F-G, and as read on its own (productUI).

Lesson · 4 steps

1. 1What happened on {device}version-load · motion
2. 2Why a new version mattersversion-trust
3. 3What Qpoint does about itmode-observe · motion
4. 4What to do insteadpin-version· instead

Check · 4 questions

1. 1A skill you use every day publishes a new version overnight. What decides what it does in your next session?→ new-version
2. 2qcontrol recorded a skill loading at a version nobody pinned. What did that stop?→ what-qpoint-does
3. 3Your agent offers to update a server to its latest version. What do you do?→ instead
4. 4A skill version nobody reviewed has already run and read your key files. What do you do?→ instead

Slots it reads

{agent} {blocked} {component} {date} {device} {evidence} {minutesWord} {outcome} {owner} {pinned} {pinnedSentence} {policy} {session} {time}

On its own (the library)

4 of 4 steps and 4 of 4 questions, as User A reads it with no finding. In the file's own words for the library (D38): what-happened.

Voice

Zero violations across 58 texts: the file as written, as read on no finding, and as read on its own (productUI).

Lesson · 4 steps

1. 1What happened on {device}connection · motion
2. 2What an MCP server can doserver-reach · motion
3. 3Why there is a sanctioned listsanctioned-list
4. 4What to do insteadask· instead

Check · 4 questions

1. 1You let an agent connect to an MCP server you have not used before. After that, what decides what the agent can do through the server?→ server-reach
2. 2{server} is sanctioned for {exceptionTeam}. Does that make it sanctioned for {team} too?→ why-the-list
3. 3Your work needs an MCP server that is not on your team's sanctioned list. What do you do?→ instead
4. 4On {team}, this policy is set to Observe, not Enforce. An agent connects a server that is not sanctioned. What happens?→ what-happened

Slots it reads

{agent} {blocked} {date} {device} {evidence} {exceptionSentence} {exceptionTeam} {minutesWord} {outcome} {owner} {policy} {sanctioned} {server} {session} {team} {time}

On its own (the library)

4 of 4 steps and 4 of 4 questions, as User A reads it with no finding. In the file's own words for the library (D38): what-happened, q-observe.

Voice

Zero violations across 86 texts: the file as written, as read on F-A, F-B, F-E, and as read on its own (productUI).

Lesson · 4 steps

1. 1What happened on {device}spend-ceiling · motion
2. 2How an agent on its own runs up a billretry-loop
3. 3What Qpoint does about itmode-observe · motion
4. 4What to do insteadagent-limit· instead

Check · 4 questions

1. 1An agent left overnight retries a failing test every forty seconds. What does each retry cost?→ retry-loop
2. 2Your agent passed the spend ceiling during the night. What did Qpoint do?→ what-qpoint-does
3. 3Before you leave an agent running on its own, what helps most?→ instead
4. 4You come in and find your agent still retrying the same step. What do you do?→ instead

Slots it reads

{agent} {blocked} {ceiling} {ceilings} {date} {device} {evidence} {minutesWord} {outcome} {owner} {policy} {session} {time}

On its own (the library)

4 of 4 steps and 4 of 4 questions, as User A reads it with no finding. In the file's own words for the library (D38): what-happened.

Voice

Zero violations across 53 texts: the file as written, as read on no finding, and as read on its own (productUI).