Blog

Technical depth on AI, Azure, Next.js, and the engineering decisions behind them.

286 posts

Azure Maia 300: what Microsoft silicon means for Foundry

Microsoft announced Azure Maia 300 on 12 October 2026 with 288 GB of HBM4, 18 TB/s and a claim of 40% more tokens per megawatt, but the chip that reaches Microsoft Foundry by year end is Maia 200, serving OpenAI and open-weight models in unnamed European regions with no price change. What the silicon transition does and does not change for EU data zone deployments, model choice and your evaluation baseline.

October 13, 2026236 viewsAzure & Cloud

Let's Encrypt 64-day certs: your Azure renewal audit

Let's Encrypt will issue 64-day certificates by default from 10 February 2027, flips its staging environment on 14 October 2026, and drops to 45 days with seven-hour authorization reuse in 2028. On Azure that touches certbot on VMs, cert-manager on AKS and Key Vault pipelines feeding Front Door and Application Gateway, where fixed renewal schedules and absolute monitoring thresholds need to become relative.

October 12, 2026174 viewsDevOps & Infrastructure

Gemini agent vs Agent 365: the agent identity decision

Google introduced the Gemini agent on 8 October 2026: a universal work agent whose coworker agents get their own @agents.company.com mailbox, calendar and Drive, in private preview with no price. We set it against Microsoft Entra Agent ID and Agent 365, both GA since spring at $15 per user per month, compare the two identity models, run the cost math for a 1,000-user Swedish M365 shop, and list the EU residency and offboarding questions to ask before a pilot.

October 11, 2026277 viewsAI & Cloud Infrastructure

Microsoft-Decision-1 in Foundry: $0.042 and the EU zone

Microsoft-Decision-1 went GA in Microsoft Foundry on 9 October 2026 at $0.042 per million input tokens with free output, returning calibrated probabilities over fixed options instead of text, and it launched with an EU Data Zone at the same price as the US zone. We compare it with OpenAI's Decisions API and H2O-Lightning-4B, run the cost math for ticket routing and agent step-gating, and set out what Swedish buyers must record about its Qwen3.5-9B base.

October 10, 2026346 viewsAzure & Cloud

Execution Containers GA on Windows 11: Intune comes later

Microsoft Execution Containers went GA on Windows 11 on 7 October 2026, alongside GitHub Copilot local sandboxing, so the OS now enforces which files and hosts an agent can reach. Intune policy and Entra agent attribution are still "coming soon" with no date, which leaves the agent developer drawing the boundary and the employee's name on every action; here is what to enforce now, what to defer, and the Cloud PC cost math.

October 9, 2026243 viewsSecurity & Compliance

Claude Haiku 5.5 in Foundry: $0.10 and the 100K cliff

Claude Haiku 5.5 is GA in Microsoft Foundry at $0.10/$0.50 per million tokens, the same Global Standard list price as GPT-6 Luna, and 90% below Haiku 4.5 on paper. The bills diverge on three lines: a tier that charges 5x on every token once a prompt passes 100K, a tokenizer that counts the same text as 30% more tokens, and an EU Data Zone that Luna offers at $0.12/$0.60 while Claude on Foundry has none.

October 8, 2026248 viewsAzure & Cloud

The same MCP flaw at Google, JPMorgan and DINUM: your audit

Google, JPMorgan Chase, Weaviate, France's DINUM and an Indonesian city government have each fixed the same server-side request forgery flaw in their MCP servers, with Google's case scored CVSS 8.0 as CVE-2026-14540. Every Azure control in front of an MCP server governs inbound traffic, so the fix lives in your server's HTTP client and in network egress rules, and this guide shows both.

October 7, 2026255 viewsSecurity & Compliance

OpenAI's EU text watermark: Azure OpenAI is not covered yet

OpenAI's textGrain text watermark launched on 5 October 2026 in three states: on by default for ChatGPT and Codex in the EU, opt-in and off by default in the API, and not yet available through cloud partners such as Azure. Microsoft Foundry's provenance page lists only Claude models for text marking, so Azure OpenAI teams still own the Article 50(2) duty themselves, with the 2 December 2026 transitional deadline eight weeks away.

October 6, 2026306 viewsSecurity & Compliance

OpenAI Dots and the EU: Pro is blocked, Business is not

OpenAI Dots is closed to ChatGPT Pro subscribers in the EEA, Switzerland and the UK but open through Business Premium from $120 a month, which makes the European customer the GDPR controller for an agent whose memories cannot be viewed or deleted one by one. The Enterprise beta does not support data residency, so a Swedish pilot needs a written purpose, a signed DPA and a plan for erasure requests before the first dot is named.

October 5, 2026974 viewsAI & Cloud Infrastructure

OpenAI Dots and the audit log: whose action was that?

A standard OpenAI dot acts on its owner's account, so downstream logs name the employee and cannot separate attended from unattended action, while Microsoft's Entra agent labels never see it. Specialist dots with their own identity are in pilots with an undated Agent 365 integration, so today's controls are plugin scope, the four rule levels, role permissions and a usage policy written for agents.

October 4, 2026258 viewsAI & Cloud Infrastructure

OpenAI Dots vs Meta Muse: two agent trust models compared

OpenAI Dots and Meta Muse launched 21 days apart with opposite trust models: Dots inherit 4,000+ ChatGPT plugins and the user's identity behind auto-review and four rule levels, while Muse runs each user in a dedicated VM behind a Sentinel gatekeeper with surrogate credentials. Only Dots are reachable from Sweden, through Business Premium, so the practical work for a Swedish team is plugin inventory, rule levels and audit attribution.

October 3, 2026385 viewsAI & Cloud Infrastructure

OpenAI Dots decoded: always-on agents on GPT-6 Astra

OpenAI Dots are always-on agents on GPT-6 Astra with their own cloud computer, 4,000+ inherited ChatGPT connectors, four permission levels and a memory you can reset but not read. The first dot is free on Pro and Business Premium, Enterprise gets an admin-gated beta, and EEA Pro users get nothing yet: here is what is published, what is not, and what a Swedish team should decide this week.

October 2, 2026470 viewsAI & Cloud Infrastructure