The workflow

Watch this workflow run through Kroy.

  1. The request.

    “Microsoft Teams”

  2. Who is asking.

    Kroy identifies the person in delivery and Claude acting for them, within the delegation they gave it.

  3. Only what the task needs.

    Kroy retrieves project State (decisions, findings, open questions, deliverables), working documents (SharePoint) and project channel messages (Microsoft Teams) from SharePoint and Microsoft Teams.

  4. Excluded by design.

    Restricted interview notes, for people not cleared for them, Other engagements and Commercial terms of the engagement never reach Claude. That boundary is Kroy’s, not an instruction to the AI.

  5. The proposed action.

    Permitted: read project State (state.read), add findings and open questions (state.update) and draft deliverables (artifact.create).

  6. What Kroy refuses.

    Refused: change a client-agreed decision without approval, read restricted interview notes without clearance and read other engagements.

  7. A person decides.

    The engagement lead approves any change to a client-agreed decision.

  8. State changes. Everything is recorded.

    The work is updated in Kroy, and every request — allowed or refused — is written to the audit trail.

Claude
Delivery
Kroy
SharePoint
Microsoft Teams
Read project State
Change a client-agreed de…
! Approval
AUDIT · STATE

Retrieved

  • Project State (decisions, findings, ope…
  • Working documents (SharePoint)
  • Project channel messages (Microsoft Tea…

Excluded

  • Restricted interview notes, for people…
  • Other engagements
  • Commercial terms of the engagement
Claude
Delivery
Kroy
SharePoint
Microsoft Teams
Read project State
Change a client-agreed de…
! Approval
AUDIT · STATE

Retrieved

  • Project State (decisions, findings, ope…
  • Working documents (SharePoint)
  • Project channel messages (Microsoft Tea…

Excluded

  • Restricted interview notes, for people…
  • Other engagements
  • Commercial terms of the engagement
Shared project state across a consulting team’s AI tools: the workflow through Kroy. The request.. Who is asking.. Only what the task needs.. Excluded by design.. The proposed action.. What Kroy refuses.. A person decides.. State changes. Everything is recorded..

What the AI can and cannot do

Data accessed

  • Project State (decisions, findings, open questions, deliverables)
  • Working documents (SharePoint)
  • Project channel messages (Microsoft Teams)

Data excluded

  • Restricted interview notes, for people not cleared for them
  • Other engagements
  • Commercial terms of the engagement

Actions permitted

  • Read project State (state.read)
  • Add findings and open questions (state.update)
  • Draft deliverables (artifact.create)

Actions refused

  • Change a client-agreed decision without approval
  • Read restricted interview notes without clearance
  • Read other engagements

Human approval required

  • The engagement lead approves any change to a client-agreed decision

Business situation

A London consultancy is running a review for ABC Limited. One consultant does research with Claude. Another drafts deliverables with ChatGPT. The engagement lead uses Microsoft Copilot. Decisions are agreed with the client in weekly meetings, and interview notes from ABC Limited’s staff are sensitive.

Why existing tools alone are insufficient

Each AI keeps its own memory. A finding one consultant establishes with Claude is invisible to the colleague using ChatGPT, so it gets re-explained, re-pasted or lost. Nothing stops an AI from quietly rewriting a decision the client has already agreed. And interview notes shared into one chat are then outside anyone’s control.

Systems involved

  • Kroy State — the engagement’s decisions, findings, open questions and deliverables.
  • SharePoint — working documents.
  • Microsoft Teams — the project channel.

Kroy architecture

All three AIs connect to Kroy. The engagement is an entity in KroyDB with its State. The Update Project State Skill may add findings and open questions; the Summarise Findings Skill may read State and draft deliverables. Decisions marked Client-agreed are locked: changing one requires the engagement lead’s approval. Interview notes carry a restricted classification, readable only by people cleared for them.

Workflow

  1. The research consultant asks Claude: “Record what we learned from this week’s process interviews.” Claude writes three findings and an open question with state.update, each linked to its source.
  2. The drafting consultant asks ChatGPT: “Draft the current-state section using the latest findings.” Kroy returns the same State with state.read, and ChatGPT drafts the section with artifact.create.
  3. ChatGPT requests the underlying interview notes. Kroy refuses: the drafting consultant is not cleared for restricted notes. ChatGPT works from the findings instead.
  4. ChatGPT proposes changing the agreed scope decision to include procurement. Kroy refuses the change and routes it to the engagement lead as an approval request.
  5. The engagement lead asks Copilot: “What has changed on ABC Limited this week, and what needs my decision?” Copilot summarises the new findings and the pending scope change.
  6. The engagement lead discusses it with the client and approves the change. The decision is updated, with the approval recorded.

Agent permissions

Each AI acts under its own person’s delegation. All can read the engagement’s State. Only people cleared for restricted notes can have their agents read them. No agent can change a locked decision directly.

Human permissions

Consultants add findings and draft. The engagement lead approves changes to client-agreed decisions and manages clearance.

State changes

  • Three findings and an open question are added, each with its source.
  • A draft section is linked to the findings it used.
  • The scope decision moves to a new version after approval.

Audit outcome

Kroy records which agent added or read each item, the refused request for restricted notes, the refused direct change, the approval and the new decision version.

Security considerations

  • Context moves between AIs through Kroy State, not through pasted chat transcripts.
  • Classification and locked decisions are enforced by Kroy, not by instruction.
  • Each finding carries provenance, so the team can see where it came from.

Setup requirements

  • The engagement modelled as an entity with State in KroyDB.
  • Microsoft 365 connected to Kroy.
  • Claude, ChatGPT and Microsoft Copilot connected to Kroy.
  • Classification and decision-lock policies configured.

Try this with your own systems.

See how Kroy State works