This talk frames the finance copilot as a domain service with policy‑as‑code, cite‑or‑fail retrieval, and telemetry that links question to sources to filters to summary. We will show how to define context boundaries for the assistant, encode refusal rules, and run a 30‑60‑90 rollout that balances autonomy and governance. Outcome is a credible path from demo to daily use without eroding trust.