Microsoft's Windows developer post on Tuesday said agents will run inside Microsoft Execution Containers, a policy layer that lets developers declare file and network access before an agent acts and has Windows enforce those boundaries at runtime.
MXC matters because it puts the operating system between autonomous software and the corporate data it can touch. The same Build 2026 post detailed the isolation: agents are separated from the user's desktop, clipboard, user interface and input devices, and Windows assigns each agent a local ID or Entra-backed cloud identity and attributes activity to that identity. On the same day, Microsoft rolled out a GitHub Copilot desktop app for agent work, Scout as an always-on Copilot agent, local Aion models and Project Solara concept devices.
Sarah Bird, Microsoft's chief product officer of Responsible AI, told TechCrunch that "evaluations are absolutely critical to making good decisions." The same article noted that Microsoft released ASSERT and the Agent Control Specification because policy files need to be written, intercepted and checked. MXC will ship with Agent 365 integration for Defender, Entra, Intune and Purview in July, not at general availability Tuesday.
Key Takeaways
- Microsoft put Windows between AI agents and the data they can access, with OS-level containment enforced by the kernel itself.
- The Execution Containers SDK ships in early preview; the enterprise Defender/Entra/Intune/Purview stack is due in July.
- Build 2026 was one stack: Aion local models, Scout in Copilot, the GitHub Copilot desktop app, and Project Solara concepts.
- Omar Shahine told Wired his own Scout once sent email that was just one big run-on sentence, no formatting.
AI-generated summary, reviewed by an editor. More on our AI guidelines.
What the partners are building on MXC
Dillon Rolnick, chief executive of Nous Research, put the developer case in Microsoft's post. "Continuously-running local agents, like Hermes Agent, require intentional isolation. Developers need control over what an agent can access and trust that those controls will hold," he said. OpenAI's David Wiesen said MXC lets the company explore safer code generation and execution patterns for Codex.
The Build 2026 stack
The table below shows the main pieces and the status that matters for buyers.
| Layer | Build 2026 announcement | Status or comparator |
|---|---|---|
| Control | Microsoft Execution Containers and Agent 365 | Early preview. Agent 365 Windows integration due in July preview. |
| Context | Microsoft IQ, Work IQ APIs and Web IQ | Microsoft IQ generally available. Work IQ APIs due June 16; Web IQ claimed at 2.5 times the next alternative. |
| Workplace agent | Microsoft Scout | Frontier customer release. Teams and Outlook integration; GitHub Copilot account required for desktop test. |
| Developer workflow | GitHub Copilot app | Technical preview. GitHub cited 1.4 billion commits a month and more than 2 billion Actions minutes a week. |
| Local compute | Aion models and Surface RTX Spark Dev Box | Aion 1.0 Plan has 14 billion parameters and 32K context; Dev Box offers 1 petaflop and 128GB unified memory. |
| New devices | Project Solara | Concept. Desk hub and badge; pilots expected with AccuWeather, Best Buy, CVS Health, Levi's and Target. |
The numbers point to Microsoft's intended business model. Web IQ supplies grounding, Work IQ supplies enterprise context, MXC supplies runtime control and Surface RTX Spark supplies local compute.
Project Solara and Scout
GeekWire reported that Project Solara is based on the Microsoft Device Ecosystem Platform, an enterprise Android variant Microsoft already uses for Teams room hardware. The first two reference designs are a desk hub that can become a Windows 365 machine with a monitor attached and a wearable badge with a camera, microphones, fingerprint button and 5G.
Stevie Bathiche, the Microsoft technical fellow leading the Applied Sciences Group, told GeekWire that "boundaries are collapsing." He added, "You don't necessarily need the traditional app model. You don't need the traditional way of developing experiences." In another line from the briefing, Bathiche said the goal is "to put your agent into those spaces."
Do not miss the next agent-platform shift
Strategic AI news from San Francisco. No hype, no "AI will change everything" throat clearing. Just what moved, who won, and why it matters. Daily at 6am PST.
No spam. Unsubscribe anytime.
Ars Technica supplied the counterweight: Solara is still concept hardware and software. Nobody can buy the badge or desk device, and Microsoft's next step is to demo the designs with partners. Scout is closer to today's workflow. Wired reported that the agent appears in Teams, can read messages, calendar and email, and is being tested with a small group of customers.
Omar Shahine, Microsoft's corporate vice president for Scout, told Wired, "Your company essentially hires your assistant." He also gave the human caveat: his own Scout once sent an email that was "just one big run-on sentence, no formatting."
Local models and the July test
The model news shows why Microsoft wants this control layer on Windows. Aion 1.0 Plan, according to the Windows post, is a 14 billion parameter reasoning and tool-calling model with a 32K context window that ships in-box on capable devices. MAI-Thinking-1, according to Microsoft, has 35 billion active parameters and a 256K context window in Foundry private preview.
That continues the strategy The Implicator noted in April, when Microsoft framed its model push as superintelligence while pricing showed a cost-reduction play. Build 2026 adds the client side of that story: local models reduce cloud round trips, while governed agents keep the work inside Microsoft's identity and device-management stack.
Agent 365's Defender, Entra, Intune and Purview integration is due in July preview. Solara pilots with AccuWeather, Best Buy, CVS Health, Levi's and Target are expected in the coming months. The gap between a sandbox and a trusted agent is filled by the policies those previews produce.
Know someone who'd find this useful? ✉️ Email it to a friend in one click, or they can subscribe free here.
Frequently Asked Questions
What is Microsoft Execution Containers?
A policy-driven execution layer for Windows and WSL that lets developers declare agent access rules (files, network) and has the OS enforce those boundaries. Early preview at Build 2026.
When does the full security stack arrive?
Defender, Entra, Intune and Purview integration is due in July 2026 preview as part of Agent 365. MXC is available now in early preview.
What hardware did Microsoft show?
Surface RTX Spark Dev Box with 1 petaflop and 128GB memory, plus two Project Solara concepts: a desk hub and a wearable badge with 5G, camera and fingerprint sensor.
Is Scout generally available?
No. Frontier customer release only. It requires GitHub Copilot, Intune policy, and an attestation. Broader rollout will follow.
How does this affect the Microsoft-OpenAI relationship?
Build 2026 showed Microsoft fielding its own MAI-Thinking-1 reasoning model (35B params) in Foundry. OpenAI Codex is listed as an MXC integration partner alongside other frameworks.
AI-generated summary, reviewed by an editor. More on our AI guidelines.



IMPLICATOR