Project
Microsoft's announced control plane for deploying, organising and governing AI agents across Microsoft, open-source and third-party platforms.
Microsoft made Microsoft Execution Containers, its policy layer for limiting what AI agents can touch, generally available on Windows on October 7. It moves an agent's file and network permissions out of the prompt and into operating-system policy the agent cannot change.
Reality
OpenAI's Dots agents each get a cloud computer and reach into more than 4,000 apps, so they can keep working on a project while the user is away. Before one runs, a team has to decide which actions it takes alone, which wait for approval and which stay blocked.
Perspective Coverage
25 publishersReality
Microsoft's public preview flags jailbreaks, prompt injection and credential leakage from agent telemetry, and agents built outside Copilot Studio, Foundry and Agent Builder need the Agent 365 SDK first.
Reality
Microsoft's Execution Containers SDK, previewed at Build 2026, lets a developer state what an agent may touch and leaves Windows to apply that at runtime, with Entra and Intune setting the policy per agent.
Reality
Agent 365 pushes agents into the same registry, access policies and e-discovery used for staff. That moves the governance work onto teams you already fund.
Reality