drop m365 copilot audit log · parse prompts + app context · runs locally
m365 copilot audit csv/json · local only
heuristic screener · vendor schema varies · not definitive proof