PS HarriJaakkonen :~/Posts> Get-AllPosts | Sort-Object Date -Descending | Format-List
PS> Find-Post
Secure AI Agents: Connecting Dynamic Risk to Runtime Containment

Connect Project Perception risk decisions to runtime, tool and data controls, with practical approval, revocation and evidence tests for secure AI agents.

Read →
Microsoft Entra Conditional Access policy plans: shared intent, separate rules

A practical look at Microsoft Entra Conditional Access policy plans: shared conditions, emergency access exclusions, rule inheritance, agent targeting, preview limits, and migration.

Read →
Project Perception and the Agentic Insider: What Microsoft Announced So Far

Project Perception's agentic-insider controls, Application Card limits, security playbooks and a practical pilot connecting risk signals to verified enforcement.

Read →
Microsoft's New Copilot Harness Is Impressive. But Who's Governing the Agents?

The Microsoft Copilot harness brings managed agent execution to Foundry. Identity, tool authorization, skills, egress and evidence still need owners and tested controls.

Read →
Microsoft Defender Local AI Agent Discovery: What Works and What Doesn't

Defender for Endpoint now discovers local AI agents and MCP servers on Windows and macOS. What the GA release covers, where the gaps are, and how to roll it out.

Read →
Microsoft Purview in Late 2026: Legacy Office Files, Network DLP and AI Data Security

Microsoft Purview is closing historical classification gaps and extending protection to networks and SaaS. What has shipped, what is planned, and why identity still matters.

Read →
SCIMming with Groups in 2026: PIM and AWS IAM Identity Center

Use Microsoft Entra PIM for Groups and SCIM to grant just-in-time access to AWS IAM Identity Center, with the current provisioning timings and limits.

Read →
Who Is Asking Authenticator for a Token? Lessons from CVE-2026-80097

Enclave AI and Ofek Levin's AuthMask research shows why Android authentication brokers must verify the real calling app before returning delegated tokens.

Read →
GitHub Enterprise Local and Foundry Local: What Stays Local, What Doesn't

A practical look at GitHub Enterprise Local, Foundry Local, their current limits, and what connected and disconnected development workflows can do.

Read →
Azure Container Apps Express: The Fast Application Tier Built on Sandboxes

Azure Container Apps Express promises fast provisioning and subsecond scale from zero. This practical review explains the Sandbox foundation, security boundaries, cost model, supported features, and where a standard Container Apps environment is still the better fit.

Read →
Microsoft Execution Containers: A Policy Boundary for AI Agents

Microsoft Execution Containers (MXC) give AI agent workloads an OS-enforced boundary. Learn how policies, backends, and learning modes fit together.

Read →
AI and Work: What It Can Do, What It Cannot, and Who Decides

A study of Daron Acemoglu's essay on AI and workers, the evidence on productivity and job exposure, and a practical view of what AI can and cannot do at work.

Read →
Agent 365 in September 2026: APIM, MCP Governance, and AI Cost Controls

A practitioner’s breakdown of Microsoft Agent 365’s September 2026 updates, including the Azure API Management gateway integration, MCP governance, agent rules, and AI cost management.

Read →
Agents Need an ID: Human Sponsorship and Accountability for AI Actions

An AI agent needs its own identity, but a human sponsor must remain accountable for its purpose and actions. A practical look at ownership, oversight, and responsibility.

Read →
The More Autonomy AI Gets, the Smaller Its Blast Radius Should Be

Microsoft's 2026 Responsible AI Transparency Report explains why agentic AI needs identity, scoped permissions, runtime controls, observability, and human intervention. AI Universe turns those ideas into an Azure architecture.

Read →
Microsoft Digital Defense Report 2026, Part 2: AI Agent Security and Resilience

Secure AI agents beyond the prompt: enforce tool authorization, control retrieval and memory, test side effects, and recover a critical workflow without compromised identities.

Read →
Microsoft Entra External ID in 2026: What’s GA, What’s Still Preview

A practical October 2026 update on Microsoft Entra External ID: passkeys, JIT migration, HSC mode, native MFA, federation, current previews, and what changed since the three-part series.

Read →
Microsoft Digital Defense Report 2026, Part 1: Identity and Intrusion Paths

A practical reading of Microsoft's 2026 report: follow phishing and stolen sessions into application identities, software builds, and business data, then test containment.

Read →
Azure Container Apps Sandboxes Are GA: The Portal and Security Boundary for Agents

Azure Container Apps Sandboxes are generally available. This is what the new portal, microVM isolation, egress policy, managed identity injection, VNet integration, IaC, and observability mean for agent platforms.

Read →
Microsoft Sentinel in September 2026: Data Lake, Fabric, and Incident Cases

Microsoft Sentinel's September 2026 update unifies data lake onboarding, retention, Advanced Hunting, Fabric compute, and Incident Cases. Here is what changes for SOC architecture and agent-assisted response.

Read →