1. UI and Diagnostic Report
The Origin agent runs a small UI accessible from the system tray (Windows) or menu bar (macOS). The icon color is the fastest health check available without opening a terminal.
Click the icon to open the menu. From there you have two key actions:
- Diagnostic Report — runs a full self-test covering registration, mTLS credentials, backend reachability, telemetry collection, and entitlements. Every line should read OK.
- Open Log Folder — opens the runtime log directory directly in Finder or File Explorer:
- Windows
- macOS
2. Verify services and processes
Both the Origin Agent and the Origin Watchdog must be running. The watchdog starts at boot and is responsible for bringing up — and keeping up — the core agent process.- Windows
- macOS
Run the following command in an elevated PowerShell prompt:Both services should report a status of Running.
Cross-check in the Origin Platform
Sign in to the Origin Platform, open the Registered Endpoints view, and confirm your endpoint appears with a recent Snapshot Time. If the endpoint is listed here, it has successfully registered with the Origin Platform.3. Confirm telemetry collection is configured
Origin collects AI event data at the application layer — through each AI tool’s OpenTelemetry exporter and through application-level hooks — so there is no proxy, system extension, or certificate to verify on either platform. The agent runs a local OTel collector on the endpoint’s loopback interface, on port 4318 by default. Confirm nothing else has claimed that port:- Windows
- macOS
4. Generate test activity
Pick one or two of the generation methods below, run a prompt, and then validate the captured activity in the Origin Platform. Choose methods that reflect how AI is actually used in your environment.Sample prompts
The following prompts exercise different capture archetypes:- Summarization — “
ORIGIN-VERIFY-20260513— summarize the NIST AI Risk Management Framework (AI RMF 1.0) in three bullets.” - Code generation — “
ORIGIN-VERIFY-20260513— write a Python function that validates an IPv4 CIDR string.” - Rewrite / tone shift — “
ORIGIN-VERIFY-20260513— rewrite this for a non-technical executive: [paste a short paragraph].” - Open Q&A — “
ORIGIN-VERIFY-20260513— list the OWASP Top 10 for LLM Applications.” - Data analysis — “
ORIGIN-VERIFY-20260513— given this CSV: [paste 5–10 rows], identify outliers and explain your reasoning.”
4.1 M365 Copilot — desktop / Office apps
- Open Word, Excel, or PowerPoint on the verified endpoint.
- Click the Copilot icon in the ribbon to open the Copilot pane.
- Send a verification prompt from the list above.
- Send a follow-up message to generate a multi-turn session.
4.2 M365 Copilot — web
- Browse to https://copilot.microsoft.com and sign in.
- Send a verification prompt.
- Send a follow-up in the same conversation.
4.3 Direct-to-vendor — Claude.ai / ChatGPT / Gemini
Pick whichever service your environment permits: claude.ai, chatgpt.com, or gemini.google.com.- Sign in to the service.
- Send a verification prompt from the list above.
- Send two or three follow-up messages to populate a meaningful session.
5. Verify activity in the Origin Platform
Allow 1–2 minutes for events to propagate to the platform after generating test activity, then:- Open the Origin Platform.
- On the All Endpoints view (the default landing page), locate your endpoint and click it.
- Confirm the activity bar at the top of the endpoint page shows recent prompt activity — colored ticks indicate prompts captured within your test window.
- In the Resource Overview graph, confirm that the AI services you used appear as nodes. Running Copilot and Claude.ai traffic should populate at least:
- ChatGPT (M365 Copilot’s underlying model surface frequently appears under this label)
- Claude
- M365 Copilot
If you embedded a unique token in your prompts, use the search or filter functionality in the Origin Platform to find it directly and confirm end-to-end capture.