THE RAPPORT AGENT WORKSPACE

“Can we work
through this?”

A working conversation between you, cloud AI and the harness on a managed device. The model reasons through the evidence; the native agent runs checks on demand, enforces local command policy and brings held commands back for your decision.

Beta and pilot evaluation. Confirm the enabled capabilities and agent release for your environment.

DON’T JUST READ ABOUT THE WORKSPACE

Have the conversation.
See the work behind it.

Follow four investigations adapted from internal sessions. Inspect the evidence, see where the operator changed the direction, and distinguish a verified setting from a confirmed resolution.

RapportAgent Workspace
From internal use
macOS · Files won’t syncEdited walkthrough · device identity removed
40 recorded tool calls
01 / 04Look beneath the symptom
Operator · edited message

OneDrive isn’t syncing. Can you diagnose and resolve it?

Rapport · edited response

OneDrive is running. Both accounts report no upload errors and no queued work. That alone doesn’t explain why a file isn’t arriving.

I’m checking the account logs, sync folders and macOS File Provider layer together.

Inspect the supporting evidence 2 checks
Application stateshell + probe

Business and Personal processes running; no recent app crashes; plenty of free disk space.

Per-account diagnosticsread_file

Both accounts report zero upload/download errors and an empty queue.

An empty error queue is evidence to investigate, not proof that sync is working.

Files won’t sync · step 1 of 4

Adapted from internal sessions. Wording condensed; identities removed. No live device, AI request or real execution.

Edited walkthroughs based on internal sessions, with identities removed. These are condensed records, not a live AI chat or a connection to your devices.

A CONVERSATION WITH SOMETHING BEHIND IT

Read the explanation.
Inspect the actual work.

01 / OBSERVE

See the checks.

The agent can use native diagnostic checks, bounded file reads and enabled shell tools. The activity view shows tool calls and results alongside the assistant’s interpretation.

02 / DECIDE

Review the exact command.

When a command is held, inspect its text and the reason for review. Approve that individual command or decline it—not a blanket plan or every later action.

03 / FOLLOW THROUGH

Work from the result.

Read the outcome and continue the conversation. A successful command exit is not proof that the original issue is resolved; follow-up observations still matter.

AUTHORITY IS PART OF THE WORKFLOW

An assistant on the device.
Not unrestricted control.

Enable the workspace deliberately for the intended devices. Agree who can operate it, which tools are enabled and what information the workflow may access.

Tenant-scoped operators

Workspace actions require an authenticated operator in the device’s tenant and an MFA-verified session.

Explicit tool settings

The assistant module and session settings govern available tools. Read-only shell checks run automatically only when the applicable settings and policy allow.

A visible decision point

Held commands wait for an approve or decline decision. Inspect the command and its likely effects before authorizing it.

The agent operates under its SYSTEM/root service identity. Command review and output limits are controls—not an operating-system sandbox. Scope workspace access accordingly.

UNDERSTAND THE DATA PATH

Local execution.
Cloud-assisted reasoning.

The endpoint runs the checks. The Rapport gateway makes the AI request. Be clear about both boundaries before enabling the workspace.

ON THE DEVICE

Endpoint agent

Runs the tool loop and permitted local checks.

Device-bound credentials
Conversation
and tool context
RAPPORT CONTROL PLANE

Rapport gateway

Checks endpoint, tenant and session context.

Provider credentials stay server-side
Model request
and response
CONFIGURED AI

AI provider

Interprets observations and proposes the next step.

Review provider terms

What crosses the boundary?

Prompts, conversation context, tool definitions and bounded tool results. These can include filenames, paths, selected file content, command output and personal information.

What needs a deployment review?

The backend stores conversation and step history. Agree data scope, retention and AI-provider handling. Pattern-based redaction reduces exposure; it does not guarantee anonymization.

Review governance and data boundaries
THE PLATFORM AROUND THE CONVERSATION

The workspace is where you act.
The platform supplies the context.

Go beyond one repair.

Use the wider platform for supported remediation and staged patch work, with their own targeting and approval controls.

Keep the operating model clear.

Define collection and access boundaries, then decide how eligible agent releases reach your devices.

START WITH ONE DEVICE AND ONE REAL ISSUE

Bring the support question.
We’ll help scope the pilot.

Agree the device cohort, tool settings, data scope and acceptance criteria before enabling the workspace for your team.

Plan a workspace pilotReview deployment requirements