$ onboard-agent --type copilot --env production
→ Scanning environment... done
→ Configuring MCP permissions... done
→ Setting scope boundaries... done
→ Enabling behavioral monitoring... done
→ Agent ID: agt_k9x2m7p4
✓ Agent onboarded in 4.2s — production ready
// Behavioral anomaly score — last 7 days
⚠ Anomaly spike detected: Day 5 (score: 94)
→ Trigger: unusual access time + new IP
→ MFA step-up enforced automatically
// Access certification report — Q1 2026
Total reviews: 1,248
Approved (AI-recommended): 847
Revoked (excessive access): 312
Escalated for review: 89
Rubber-stamp rate: 0.4% (↓ from 71%)
✓ SOX compliance: PASSED
$ jit-elevate --user j.smith --role db-admin --ttl 30m
→ Verifying identity... OK
→ Approver notified: mgr@acme.com
→ Approved by: T.Johnson
→ Session starts: 14:32 UTC
→ Auto-revoke at: 15:02 UTC (30m)
→ Recording session: active