Microsoft makes Execution Containers generally available for AI agents
Its October 7 policy layer controls file, network, process and UI access across several container backends on Windows, macOS and Linux; the MicroVM option remains experimental.
ThereforeDevelopers can set and enforce an agent's permitted access outside the agent itself.