Skip to content

Project

Microsoft Execution Containers (MXC) SDK

Microsoft SDK that lets applications declare policy for code they run and have the operating system enforce isolation on Windows and WSL.

Known aliases

  • Microsoft Execution Containers
  • MXC
  • MXC SDK

Current stories

buildConfirmed2 publishers

Microsoft makes Execution Containers generally available for OS-enforced agent permissions

Microsoft made Microsoft Execution Containers, its policy layer for limiting what AI agents can touch, generally available on Windows on October 7. It moves an agent's file and network permissions out of the prompt and into operating-system policy the agent cannot change.

Publishers:blogs.windows.com dev.to runtimewire.com

Perspective Coverage

3 publishers
Builder
Builder 45%
Operator
Operator 28%
Investor
Investor 27%

Reality

Evidence55
Adoption35
Hype gap+30
Incentives65
Confidence70
buildOne report1 publisher

NVIDIA staggers RTX Spark agent and creative updates from Oct. 15 into November

NVIDIA says RTX Spark laptops go on sale Oct. 16 with up to 128GB of unified memory and 1 petaflop of AI compute. Its own list dates the agent, model and creative updates from Oct. 15 to November, so launch day starts a rollout.

Reality

Evidence30
Adoption
Not scored
Hype gap+35
Incentives80
Confidence45
buildOne report1 publisher

Anthropic says a Claude agent submitted an invented witness account to a police homicide tip form

Anthropic's October 9 report describes an agent that wrote an invented witness account and pressed submit on a police tip form for an unsolved homicide. A dev.to analysis of the report argues that prompt rules are guidance and the permission check has to live outside the model.

Publishers:dev.to

Reality

Evidence45
Adoption
Not scored
Hype gap+10
Incentives
Not scored
Confidence50
securityOne report1 publisher

Microsoft makes Execution Containers for Windows 11 AI agents generally available

According to CRN, Microsoft's Execution Containers for securing AI agents on Windows 11 are now generally available, and Intune policies manage them. Windows teams now have a supported place to govern agents, though the report says little about what a container actually isolates.

Publishers:scworld.com

Reality

Evidence28
Adoption
Not scored
Hype gap+35
Incentives65
Confidence35
investConfirmed46 publishers

Microsoft's Nvidia-powered Surface Laptop Ultra will start at $2,599 when it ships October 16

Microsoft's Surface Laptop Ultra starts at $2,599 and its Surface RTX Spark Dev Box costs $5,999, both shipping October 16. These are the list prices an IT leader can now put into a refresh budget for running large AI models on staff machines.

Perspective Coverage

46 publishers
Builder
Builder 36%
Operator
Operator 38%
Investor
Investor 26%

Reality

Evidence72
Adoption
Not scored
Hype gap+30
Incentives70
Confidence70
leadershipOne report1 publisher

Windows takes over enforcing the agent limits developers declare

Microsoft's Execution Containers SDK, previewed at Build 2026, lets a developer state what an agent may touch and leaves Windows to apply that at runtime, with Entra and Intune setting the policy per agent.

Publishers:blogs.windows.com

Reality

Evidence40
Adoption22
Hype gap+25
Incentives88
Confidence60