Windows gets a sandbox for AI agents⁠.

Microsoft held its Windows and Surface event in San Francisco on Wednesday, with Satya Nadella and Nvidia's Jensen Huang on stage together¹. Microsoft announced general availability of Microsoft Execution Containers, or MXC, which it describes as operating system infrastructure that lets agents run safely and persistently in the background, under the operating system's control¹. TechCrunch reports that the feature makes it easier to sandbox AI agents, and that Nadella said it will be available to all Windows 11 users⁴.

Pavan Davuluri, who runs Windows and devices, said the aim is that agents "can be secured, observed and governed"¹. Nadella put it more simply: "We needed to make the desktop the most secure place for agents to execute"¹. He also said Microsoft is building this not just for its own apps but for anyone's agent⁴.

The other half of the news is what those agents will be allowed to touch. Microsoft showed an upgrade to Copilot that gives it access to local files on your PC and the ability to take actions across the operating system, under a label it calls Hybrid Intelligence³. In an onstage demo, Microsoft's head of Copilot asked an agent to get his accountant what she needed for his taxes; it searched several folders, renamed the files, zipped them and drafted the email with the zip attached³. Microsoft says these features will reach Copilot over the next couple of months³.

The hardware is Nvidia's RTX Spark, a chip for Windows laptops and small desktops with up to 128GB of memory, which Nvidia says can run large models on the machine itself, unmetered and without sending data to the cloud¹. Machines are coming from Acer, Asus, Dell, HP, Lenovo, Microsoft, MSI and Gigabyte¹. Microsoft's own Surface Laptop Ultra starts at $2,599 and is released on 16 October². TechCrunch puts the range at up to $5,900 and says Microsoft reports the top model is already out of stock⁴. A developer box, the Surface RTX Spark Dev Box, is on preorder at $5,999 and ships in November⁵.

The devices are clearly aimed at developers, TechCrunch says⁴. Microsoft is offering up to $1,000 off to people who trade in a MacBook Pro, a popular machine among developers and agent enthusiasts⁴.

What it means for your office

None of the announcements give British prices, British release dates or anything a UK regulator has said, so for now this is an American launch. The part that matters here does not depend on the laptops. If the container arrives with Windows 11 as Nadella says, the PCs your staff already use gain a supervised place for agents to work, and Copilot is being given leave to find, rename and package up your files and draft the email that sends them. That is a real job done for real people, and also exactly the sort of reach a careless setting or a planted instruction could turn against you.

So the sensible question for whoever looks after your IT is not whether to buy a $2,599 laptop. It is what an agent on an ordinary office PC will be allowed to open and send, who can see what it did, and who switches it off. Microsoft has now said, in public, that agents need to be secured, observed and governed. Hold it to that, and ask the same of anyone who sells you an agent.

Also today

• Co-op Legal Services uses AI to score staff phone calls

  Co-op Legal Services is using an OpenAI model to record and score probate advisers' calls on more than 50 points, which a whistleblower calls oppressive and the Co-op says is only a support tool⁶.

• UK and Germany join forces against sabotage and cyber attacks

  The prime minister and Chancellor Merz are launching a joint partnership to share information and disrupt hybrid threats, including cyber attacks on businesses and critical infrastructure, chiefly from Russia⁷.

• Google Maps starts showing UK fuel prices

  Google Maps now shows forecourt prices across the UK from the government's Fuel Finder scheme, days after diesel topped £2 a litre for the first time⁸.

• AI memory chips push Samsung to a record $80bn profit

  Samsung expects quarterly operating profit of about £61bn, nine times a year earlier and its fourth record quarter in a row, on demand for memory chips in AI data centres⁹.

• Anthropic cuts the price of its smallest model

  Claude Haiku 5.5 costs $0.10 per million input tokens up to 100,000 tokens, a tenth of its predecessor, though a new tokenizer uses about a quarter more tokens for the same text¹⁰.