1 / 10
10s
W
WorkPilot

Not a copilot.
An autopilot for your work.

An autonomous AI assistant that codes, communicates, and ships across your entire Microsoft stack — proactively and securely.

安全的AI工作助理,自主处理任务,可以在手机或者其它电脑上与你主动交互。

M365 FHL 2026

2 / 10
30s

The Problem

Today's AI tools are reactive — they wait for you to ask.

Engineers spend 50%+ of their time on coordination, not creation.

工程师超过50%的时间花在协调而非创造上。

Push code → Create PR → Post on Teams → Update ADO → Send email → Check CI → Fix build → Repeat.
Every day. Every engineer. Every team.

3 / 10
45s

Autonomous, Not Just Assistive

The key differentiator: WorkPilot acts on its own.

Proactive
Wakes on schedule, monitors ADO items, checks builds, reminds about deadlines — without being asked
End-to-end
Implements, tests, commits, creates PRs, posts Teams notifications, sends status emails
Always-on
Gateway mode 24/7 — listens on Teams, Outlook, GitHub, ADO webhooks
Progressive Autonomy
4 safety levels — from "suggest only" to "fully autonomous"

Real workflow, zero human intervention

ADO work item assigned WorkPilot wakes up analyzes requirement writes code runs tests creates PR Teams review request monitors CI auto-fixes build done

从任务分配到代码交付,全程自主完成。

From task assignment to code delivery — fully autonomous.

4 / 10
20s

How You Interact

Phone + Teams Bot + Devbox — that's all you need

📱
You
Phone / Laptop
🤖
Teams Bot
↑ 状态更新 · 审批
↓ 指令 · Commands
DEVBOX
WorkPilot
Agent Engine
10 Tools · Skills · Memory
🖥
Local Runtime
CLI · Shell
bash · pwsh
Cloud Triggers
GitHub · ADO
Outlook · Webhooks
HTTP
Azure · Graph
git push
ADO · GitHub
LLM API
LLM (Cloud)
Browser
Web Pages
(user login)
Ext. MCP
MCP Servers

你只需要一部手机。WorkPilot在Devbox上帮你完成剩下的一切。

You just need your phone. WorkPilot does the rest from your Devbox.

5 / 10
30s

How It Works

Architecture

Channels
CLI · Teams Bot · Outlook · GitHub · ADO · HTTP API
Gateway
FastAPI · Webhooks · OpenAI-compatible API
Agent Engine
LLM Loop · 10 Tools · Sub-agents · Skills · Memory
Security
Sandbox · RBAC · Audit · Approval
Proactive
Cron · Heartbeat · Scheduled Tasks

Progressive Autonomy 安全分级,渐进自主

0
Forbidden
rm -rf /
1
Approval
send emails, deploy
2
Notify
Push, PR creation
3
Autonomous
reads, searches, analysis, code gen
# One-line config — enterprise-safe by default security: profile: team # That's it.
6 / 10
25s

Enterprise Security

Safety isn't a feature — it's the architecture.

🔒
Access Control
权限控制
5 autonomy levels:
  0 = always blocked
  1 = human approval
  1.5 = request, timeout → auto-approve
  2 = notify then act
  3 = full autopilot

RBAC PolicyEngine
Per-channel allowlists
Entra ID (MSAL) auth
Command sandbox
🔍
Real-time Scanning
实时扫描
Every inbound message scanned for:
  · Prompt injection
  · Secret leakage
  · Log injection

Auto-redaction:
  JWT · API keys
  GitHub PAT · OpenAI key
  10 deny patterns
  Path restriction
📋
Log Auditing
定时审计
Structured JSONL for:
  · every tool call
  · every message in/out
  · every security event

Scheduled review:
  · cron-triggered summary
  · SIEM-ready output
  · approval workflow
  · tamper-evident log

每一个操作都有迹可查,每一个风险都在第一时间拦截。

Every action is traceable. Every threat is intercepted at entry.

7 / 10
25s

Memory & Skills

WorkPilot gets smarter with every task.

🧠
Dual-Layer Memory
两层记忆
MEMORY.md — long-term facts
  project context, decisions, prefs

HISTORY.md — searchable log
  every task, outcome, command

Auto-optimization (on overflow):
  HISTORY → LLM analysis
    key facts → MEMORY.md
    compress old entries

SQLite FTS5 · vector search
Persists across sessions & reboots
Skill Auto-generation
Skill 自动生成与优化
Task executes successfully
 
Pattern auto-extracted
 
Skill saved as Markdown frontmatter
 
Reused & refined on next run
 
Skills compose into workflows (DAG)

Bundled skills:
  GitHub · ADO · PR review
  Office tasks · email · calendar

不只是工具,是越用越懂你的工作伙伴。

Not just a tool — a partner that learns your workflow.

8 / 10
30s

What We Built

76
Source Files
305
Tests Passing
12
Modules
10
Built-in Tools
13.8k
Lines of Code

Capabilities

  • 10 tools — shell, file CRUD, git, HTTP, browser (Edge), Graph API, messaging, sub-agents
  • Microsoft Graph — read/send email, Teams messages via Entra ID (MSAL)
  • MCP protocol — connect any external tool server (stdio + HTTP/SSE)

 

  • LiteLLM — route to 100+ models: Azure OpenAI, Anthropic, OpenAI, local
  • Skills — pluggable workflows: GitHub, ADO, code review, office
  • Gateway — OpenAI-compatible REST API, drop-in replacement

76个源文件,305个测试,全部通过。这不是Demo,是可部署的产品。

9 / 10
20s

Why WorkPilot?

Head-to-head comparison

Capability GitHub Copilot M365 Copilot WorkPilot
Writes code
Acts proactively — no manual trigger
Memory persists across sessions
Cross-repo / cross-project knowledge
Self-learning from history
Enterprise security built-in Partial
Sends emails & Teams messages
Monitors systems & acts on events
Dev + Office in one agent

Bridge development and office productivity in a single autonomous agent.

将开发和办公生产力融合在一个自主Agent中的工具。

10 / 10
15s

Deploy Today

v0.1 — Doing
Agent loop, 10 tools
Graph integration
Security profiles
Gateway mode
v0.2 — Next
Full PR automation
Email assistant
ADO work item lifecycle
v0.3 — Future
Calendar management
SharePoint integration
Monitoring dashboard

Get started in 3 commands

$ pip install workpilot $ workpilot onboard # Interactive setup $ workpilot agent # Start your autopilot

一个YAML文件,一条命令,部署到你的团队。

Not a copilot. An autopilot.

Speaker Notes / 演讲备注