The copilot works by invoking real operations against your own data — the same operations the interface uses — rather than generating an answer that sounds right. Every call runs under the caller’s own permissions.
A chatbot over your data is a liability. One that calls checked tools under your role is leverage.
Kept against the code rather than a roadmap, because finding out during a demo is worse than reading it here.
It can do what you can do, and nothing else.