Access granted · practical field guide

    ChatGPT Work tutorial for reviewable knowledge workflows

    Turn one recurring knowledge-work task into a reviewed work product. Define the decision, approved sources, action boundary, verifier and handoff before you start. Availability and controls depend on your plan and workspace.

    You will finish with

    • one outcome and decision contract
    • one well-scoped Project
    • one source-authority and permission map
    • one reviewed deliverable
    • one repeatable operating loop
    • one durable handoff record for a teammate

    Quick answer or brainstorm

    Chat

    A first draft

    Multi-step research or business artifact

    Work

    A reviewed document, sheet, deck or report

    Repo edits, shell commands or tests

    Codex

    A verified software change

    0/12 complete

    Step 01

    Chat, Work or Codex?

    Choose the surface by the shape of the work. The right choice makes the source boundary and review path visible from the first step.

    NeedUseExample
    quick answer or brainstormChatGive me three angles for this memo.
    multi-step research or finished business artifactWorkResearch the market and create a cited briefing.
    repository edits, shell commands, tests or PR evidenceCodexUpdate the resource renderer and run checks.

    Do this now

    1. 1.Name the final artifact.
    2. 2.List the approved sources.
    3. 3.Choose the surface and review owner.

    Realistic example

    Resource-page QA

    The source of truth is React/TypeScript and completion needs a diff and build verification, so the task belongs in Codex, not Work.

    Expected output: A verified code change.

    Copyable prompt

    Act as a work-surface selector. Do not take action.
    
    Task: [one real task]
    Source of truth: [files / connected sources / repository / web]
    Finished artifact: [memo / sheet / deck / report / diff]
    Action boundary: [read-only / draft only / approved write]
    
    Return exactly:
    1. Recommended surface: Chat, Work or Codex
    2. Why the source and artifact require it
    3. First safe action
    4. Sources, files or tools to inspect
    5. Proof a reviewer needs
    6. One assumption that could change the recommendation

    Verification or handoff

    Write down the condition that would require you to move this task to Codex.

    Step 02

    Define the deliverable before asking for work

    Describe the thing you want to receive, not just the topic. Start with the messy brief in your own words, then turn it into a deliverable the agent and reviewer can judge.

    Do this now

    1. 1.Capture the raw request, audience and decision before polishing it.
    2. 2.Name audience, decision, inputs and format.
    3. 3.Set length, tone, evidence standard, deadline and reviewer.

    Realistic example

    GTM briefing

    Raw brief: we need to decide how to launch a new AI resource. The resulting contract asks for a two-page GTM briefing, current source links, risks and three launch recommendations for the founder and marketing lead.

    Expected output: Every current product claim linked; assumptions marked.

    Copyable prompt

    Turn this messy request into a one-screen deliverable contract. Do not research or draft yet.
    
    Raw request: [notes, voice transcript or bullets]
    
    Return exactly:
    - outcome and decision it supports
    - reader and deadline
    - approved sources and excluded sources
    - non-goals and constraints
    - output format and required sections
    - evidence and citation standard
    - reviewer and approval point
    - stop condition
    - only the questions that would materially change this contract

    Verification or handoff

    A teammate should be able to use the brief to assess the artifact without rereading the chat.

    Step 03

    Build a strong outcome prompt

    A strong Work prompt has five parts: outcome, context, constraints, process and review. Match reasoning effort to the task: routine classification and formatting need less than ambiguous research or high-stakes synthesis.

    PartWhat it controls
    Outcomewhat must exist at the end
    Contextapproved sources and facts
    Constraintswhat must not happen
    Processplan, evidence and review pause
    Reviewhow quality will be judged

    Do this now

    1. 1.Replace the vague task with a specific artifact.
    2. 2.Name only the sources that matter.
    3. 3.Ask for assumptions, a final checklist and an appropriately scoped research approach.

    Realistic example

    Weak versus strong

    Weak: ‘Research competitors and make a report.’ Strong: ‘Compare five competitors for a founder deciding whether to launch, cite every current claim and pause before finalizing.’

    Expected output: A reviewable, audience-specific briefing.

    Copyable prompt

    Produce a reviewed first version, not a generic answer.
    
    Outcome: Create [artifact] for [reader] so they can [decision/action].
    Approved context: [Project instructions, files, apps, approved websites].
    Exclusions: [sources, actions or claims not allowed].
    Evidence standard: [citations, calculations, source dates].
    Review owner: [person].
    
    First return: scope, assumptions, source plan and stop condition.
    Then return: a structured draft with cited facts, labeled inferences, open questions and a reviewer checklist.
    Pause before external actions, final sharing or any use outside the approved context.

    Verification or handoff

    Before drafting, confirm the requested artifact, source boundary, external-action rule and level of effort match the decision at stake.

    Step 04

    Use Projects as context

    A Project is a container for an ongoing body of work, not a magic memory. Keep its instructions and files current enough to be trusted.

    Source authority card

    SourceAuthorityOwnerFreshness triggerConflict route
    product truthsystem of recordproduct owneroffer or policy changesescalate to owner
    Project instructiondurable working ruleworkflow ownereach review cycleshow conflict
    prior summaryreference onlynamed authornew source or decisionrecheck source

    Do this now

    1. 1.Name the Project by outcome.
    2. 2.Add one authoritative source-of-truth document.
    3. 3.Create instructions, then start one chat per deliverable.

    Realistic example

    Keep product truth current

    Use the repository’s PRODUCT-TRUTH and current product tracker as explicit sources; keep the resource manifest as the durable authority for outbound resource URLs.

    Expected output: A Project another teammate can audit.

    Copyable prompt

    Create a Project context card for one ongoing workflow. Do not treat the Project as enforcement.
    
    Purpose: [purpose]
    Audience: [audience]
    Sources: [files, instructions, apps]
    
    Return a table with: source; authority (system of record / derived / reference / archive); owner; freshness or review trigger; allowed use/audience; conflict route.
    Then add: required definitions, facts that need citations, approved output style, actions requiring approval and the rule for uncertainty. Show conflicts and stale sources instead of silently choosing a winner.

    Verification or handoff

    Archive or label stale material and record a Project owner and next review date.

    Step 05

    Connect sources deliberately

    Every source is a permission decision and an evidence decision. Use the authoritative source for each fact and show conflicts rather than silently choosing.

    SourceBest useCheck before relying on it
    uploaded fileprivate referenceversion and owner
    Project instructiondurable ruleswhether it is current
    connected applive business contextscope and freshness
    public webcurrent factscitation, date and quality
    deep researchmulti-source synthesisplan and cited output

    Evidence receipt

    ClaimSource locator and dateStatusAccessReviewer
    launch timinglaunch-plan.md, revised 2026-09-21stated factteam onlymarketing lead
    competitor gapcited comparisoninferencepublic sourcesfounder

    Do this now

    1. 1.Map each question to one source.
    2. 2.Check read/write permissions and freshness.
    3. 3.Define how conflicts will be shown.

    Realistic example

    Source map for a launch

    Use the resource page for product copy, Search Console for current queries, competitor pages for market framing and customer comments as labeled qualitative evidence.

    Expected output: A source list attached to the final brief.

    Copyable prompt

    Build an evidence receipt before synthesis. For each claim or question, return: source locator and version/date; authority; stated fact or inference; access/audience boundary; freshness/confidence; reviewer; and conflict or missing-evidence route. A summary does not extend source permission or turn an inference into a fact. Do not use a source until its allowed use is stated.

    Verification or handoff

    Reject any result that makes a current claim without a source or a clearly labeled inference.

    Step 06

    Create documents, sheets and decks

    Ask for an artifact with visible structure and a reviewable first version. A downloadable file is not proof of correctness.

    Do this now

    1. 1.Choose document, spreadsheet or presentation.
    2. 2.Provide the expected sections and evidence standard.
    3. 3.Approve the outline before final formatting.

    Realistic example

    Three artifacts

    Document: two-page decision memo. Spreadsheet: raw data, assumptions, calculations, summary and formula notes. Presentation: ten slides, one message per slide, speaker notes and source footer.

    Expected output: A structured first version plus review checklist.

    Copyable prompt

    Create a reviewable [document / spreadsheet / presentation].
    
    Decision: [decision]
    Reader: [reader]
    Required sections: [sections]
    Approved sources: [sources]
    Non-negotiables: [formulas, layout, facts, tone]
    
    Return an outline and source map first. Then create a structured draft that flags missing or inconsistent data, labels assumptions and provides a final reviewer checklist. Do not fill gaps silently or share externally without approval.

    Verification or handoff

    Review source mapping, calculations, citations and audience fit before sharing the artifact.

    Step 07

    Set browser and cloud boundaries

    Let Work browse or act only inside a boundary you can explain. Drafting an external action is different from executing it, and a denied action must not be worked around through another app or browser surface.

    Action authority matrix

    Action classAllowed actionHuman approverFallbackMust never
    readinspect named sourcenot requiredreport unavailablebypass access controls
    draftprepare internal draftreviewersave as draftsend or publish
    proposeshow intended external actionaction ownerwait for approvalsubmit automatically
    executeonly exact approved actionnamed approverstopsubstitute another tool

    Do this now

    1. 1.List allowed websites and connected sources.
    2. 2.Mark reading, drafting and execution as separate steps.
    3. 3.Name the exact confirmation point for every external side effect.

    Realistic example

    A safe research run

    Allow reading approved sites and Drive files, but require the final email, form submission or shared-file edit to be shown for approval first. If a connector cannot perform the action, stop rather than switching to browser control to bypass the boundary.

    Expected output: A traceable approval boundary.

    Copyable prompt

    Create an action authority matrix for this workflow.
    
    Sources and apps: [list]
    Potential actions: [list]
    
    For read, draft, propose and execute, state: exact allowed action; named human approver; evidence required; fallback when access is missing; and must-never action. Do not log in to new services, send messages, publish content, edit shared files or submit forms without exact approval. Do not bypass a missing permission or connector restriction through another surface.

    Verification or handoff

    Check availability and permissions at run time; desktop files, cloud browser, apps and workspace settings can vary.

    Step 08

    Use long-running work safely

    Long-running work needs checkpoints, not one giant prompt. Make progress, sources, risks, material updates and pause points visible.

    Operating-loop card

    FieldRecord before the run
    trigger and cadencewhat starts the work and when
    approved contextsources and exclusions
    rolesWork produces; human verifies and accepts
    output and verifierinspectable artifact and acceptance check
    correction and next triggerhow to fix a rejected result and who owns the next run
    plan → source inventory → first findings → draft → review pause → revision → final handoff

    Do this now

    1. 1.Split work into checkpoints.
    2. 2.Request a source inventory before synthesis.
    3. 3.Define a material-update rule and pause before external actions and finalization.

    Realistic example

    Deep research briefing

    First approve the research plan, then inspect the cited findings and open questions before asking for the final recommendation. Report only a decision, source or risk change, not a stream of routine activity.

    Expected output: A cited report with a visible review pause.

    Copyable prompt

    Run this as a bounded operating loop.
    
    Trigger/cadence: [trigger]
    Approved context: [sources and exclusions]
    Output: [artifact]
    Verifier: [person and acceptance check]
    
    Return checkpoints for plan, source receipt, first findings, draft, review pause, revision and handoff. At each checkpoint state completed work, changed evidence, decisions needed, risks, next trigger and stop condition. If a source or permission is missing, report the blocker and correction route instead of improvising.

    Verification or handoff

    Each checkpoint should state completed work, sources used, decisions needed, risks, next checkpoint and the condition for stopping.

    Step 09

    Automate only after review

    First prove the workflow manually. Then make the repeatable parts automatic with a stated runtime source boundary, owner, cadence and stop condition.

    Starter workflow template after a successful manual run

    TemplateTriggerOutputValidation
    weekly launch briefnew material decisiondraft with evidence receiptreviewer accepts before sharing
    source freshness checkscheduled review datestale/conflict listowner confirms authority
    handoff recordaccepted artifactstate and next triggernext owner can continue

    Do this now

    1. 1.Run one successful manual version.
    2. 2.Extract a reusable prompt or template.
    3. 3.Verify scheduled runtime access, quiet reporting and the stop condition before relying on it.

    Realistic example

    Weekly leadership update

    After a reviewed manual update works, schedule a draft using approved sources that flags assumptions, reports only material changes and never sends anything externally.

    Expected output: A draft ready for human review.

    Copyable prompt

    Design one reusable workflow template only after a manual run was accepted.
    
    Manual proof: [what worked and who accepted it]
    Trigger: [event or cadence]
    Inputs: [approved sources]
    Output: [artifact]
    
    Return: trigger phrases; required inputs; output format; authority boundary; validation checks; named owner; review cadence; retirement condition; a material-change rule; and a safe dry run. Report only material changes. Do not schedule, send, publish or create external actions. If the manual proof is missing, return the smallest manual test instead.

    Verification or handoff

    Do not assume a scheduled workflow can access every Project file or connected source available in an interactive chat; verify current behavior, runtime inputs, owner and stop condition.

    Step 10

    Teams and enterprise governance

    Shared workflows need owners, permissions and review standards. Enterprise adoption is not everyone receiving the same prompt.

    RoleResponsibility
    workflow ownerkeeps instructions and sources current
    contributorworks within approved boundaries
    reviewerchecks evidence and output quality
    workspace admincontrols apps, permissions and availability
    data/security ownerapproves sensitive-data handling
    action authorityapproves exact external side effects
    incident/stop ownerpauses the workflow and owns escalation

    Do this now

    1. 1.Name workflow owner and intended users.
    2. 2.Allowlist sources and external actions.
    3. 3.Set review cadence and a retirement plan.

    Realistic example

    Rollout worksheet

    Record workspace, Project/template, approved apps, sensitive-data rules, source standard, audit evidence, approval points, owner and rollback plan.

    Expected output: A governed pilot that can be expanded deliberately.

    Copyable prompt

    Draft a governed pilot worksheet, not an enterprise assurance claim.
    
    Workflow owner: [owner]
    Data steward: [owner]
    Policy/risk owner: [owner]
    Verifier: [owner]
    Action authority: [owner]
    Incident/stop owner: [owner]
    Users and workspace: [users/workspace]
    
    Return approved apps and source boundaries; action authority matrix; sensitive-data rules; source/citation standard; acceptance evidence; training; review cadence; exception and stop route; and rollback or retirement plan. Link feature/permission assumptions to current OpenAI documentation.

    Verification or handoff

    A workflow is ready only when it has a named owner, approved sources, explicit permissions and a reviewable output.

    Step 11

    Troubleshoot rollout friction

    When Work disappoints you, diagnose the boundary before rewriting the prompt. Most problems are vague outcomes, weak sources, missing access or a task that is too large.

    SymptomLikely causeFirst fix
    output is genericoutcome or source boundary is vagueadd audience, decision and authoritative inputs
    citations are weaksource policy is unspecifiedrequire source mapping and current links
    file is unavailablesurface, permission or file-limit constraintverify access; process smaller batches
    task stops halfwayscope too large or no checkpointssplit phases and require updates
    scheduled result lacks contextruntime access differsverify runtime inputs

    Do this now

    1. 1.Identify the exact failure symptom.
    2. 2.Check outcome, sources, permissions and scope in that order.
    3. 3.Move orchestration outside chat when the platform boundary is the blocker.

    Realistic example

    Community reports

    Users report friction with large sequential file or image batches. Treat these as symptoms to investigate, not product guarantees.

    Expected output: A smaller, evidenced rerun or a clear escalation.

    Copyable prompt

    Diagnose this failed workflow. Separate outcome ambiguity, source quality, permission limits, platform availability and task scope. Propose the smallest test that distinguishes the likely causes. Do not claim a product limitation without evidence.

    Verification or handoff

    Label community reports as user-reported experience, not authoritative product behavior.

    Step 12

    Handoff and maintenance

    A finished artifact is useful only when someone can trust and reuse it. Preserve the source list, assumptions, decisions and the prompt or template that made it possible.

    Do this now

    1. 1.Link the artifact and name its audience.
    2. 2.List sources, assumptions and unresolved questions.
    3. 3.Assign next owner, review date and template maintenance.

    Realistic example

    Handoff to Codex

    When a recommended next step requires a repository edit, shell command, test or release evidence, hand off the task with its outcome contract and source map.

    Expected output: A clear boundary between knowledge work and software work.

    Copyable prompt

    Prepare a durable state record for a teammate who did not see this conversation.
    
    Artifact and version: [link/version]
    Purpose and decision: [purpose]
    
    Return exactly:
    1. Source receipts and as-of dates
    2. Stated facts versus inferences
    3. Accepted and rejected decisions
    4. Assumptions and unresolved questions
    5. What changed or was confirmed
    6. Verifier and acceptance evidence
    7. Next owner, trigger and review date
    8. Project instructions or templates to update
    9. Whether the next step stays in Work or moves to Codex, and why

    Verification or handoff

    Confirm the next person can locate the artifact, understand its provenance and know whether the next step belongs in Work or Codex.

    Finish with a handoff

    Make the next run easier.

    Record what changed, why it changed, the checks or sources used, remaining limits, the next owner and the next review date. A useful workflow is one another person can continue without redoing the discovery.