Settings · make the numbers yours

Every seat dollar in your reports uses $30 a seat until you set your real price.

Your Copilot seat price

What you pay Microsoft per seat per month, from your order form.

assumption until saved

Who may see the organization's numbers

Sponsors see every report. Everyone else sees only their own page.

When you save, every seat dollar in the three reports and the Traffic Lights is re-priced the same minute, and the "assumption" marks turn into "counted". Reports already frozen, decks already exported and cards already delivered keep the figures they were made with.

4 of 12 dials set by your organization

counted from your saved settings

Seat price — default Cowork budget — set Budget enforcement — set Measured billing — default Renewal date — set Still-need survey — default Adoption goal — default Sponsors — set Prod approvers — default Advisor access — default AI model — default Brand — default

set by your organization 4still the platform default 8

Your skills live in your organization’s own GitHub; Aristo holds the index and the receipts.

Shelf home

Your organization’s own GitHub holds the files; Aristo holds the index and the receipts.

Connected

Home: contoso/ai-shelf Folder: .github/skills 4 on the shelf Open in GitHub

Review before it lands on the shelfOn

Every version waits for somebody in your organization to approve it. With this off, a leader’s publish goes straight onto the shelf.

Allow scriptsOff

A skill may carry .py files in a scripts folder. Programs and installers are refused whatever this says.

Who can publish

Leaders and sponsors. A member asks, and a leader approves — the same two pairs of eyes as before.

Your organization requires two-factor sign-in

Yes

Your organization requires a review

Yes

Files your organization blocks

Your organization blocks file kinds of its own on top of Aristo’s rules.

What is blocked at the door

Every skill opens with its name and description between two --- lines.
The name is lower-case letters, numbers and hyphens, up to 64 characters.
The name matches the folder the skill is published in.
The description says what the skill does and when to use it, in up to 1024 characters.
Beside the name and description, only license, compatibility, metadata and allowed-tools may be set.
The folder name is lower-case letters, numbers and hyphens, up to 64 characters.
File names stay plain and inside the folder: letters, numbers, hyphens, underscores, dots and spaces — no hidden files, no reserved names, no way out of the folder.
One folder holds up to 100 files.
Programs and installers never go on the shelf.
Documents and data only: Markdown, text, JSON, YAML, CSV and images.
Scripts live in a scripts folder, and only when your organization allows scripts.
Each file stays under 1 MB.
One folder stays under 5 MB in total.
Every JSON file reads as valid JSON.
An MCP connection keeps its connections under the key servers — the shape VS Code reads from .vscode/mcp.json.
Each connection names a program to start or an address to reach.
An MCP connection carries a README.md that says what it connects to.
A key, password or token never sits in a connection's settings — use an input variable such as ${input:api-key}, which VS Code asks for when the connection starts.
A plugin carries its manifest — a plugin.json, or the manifest.json of a Microsoft 365 Copilot plugin — with a name.
Every skill inside a plugin opens with its name and description, and its name matches its folder.
A key, password or token is refused — nothing is published and the value is never shown.

This is the illustrative organization — it is never written to, so there is nothing here to set. In your own tenant this control writes the same field the classic settings screen writes, records the same audit action, and every surface that reads the setting moves with it.

Aristo reads your organization’s shelf once a day and never writes to it on a schedule.