# Rules for Microsoft 365 connector (Claude), from riskmandate.ai

<!-- 2 rules: RM-R0016 v1.0.0, RM-R0017 v1.0.0. Source: https://riskmandate.ai/rules/ -->
<!-- Each line is a request to the agent, not a control: in the behaviour-policy vocabulary, an expectation. -->
<!-- The stronger setting or boundary for each rule, where one exists, is on its page. -->

- Only read the messages, threads or documents I point you to; ask before searching my mail or chats more widely. (RM-R0016)
- Never send an email, message or invitation on my behalf without showing me the exact text and recipients and waiting for a yes; drafts are fine. (RM-R0017)