Blogg

Teknisk djupgående analys av AI, Azure, Next.js och beslutet bakom.

286 inlägg

Azure's 30 September retirements: what stops working

More than ten Azure items retire on 30 September 2026, and the ones that fail silently are more dangerous than the ones that fail loudly: URL ping tests are deleted from your resources and the ContainerLog table stops receiving data, taking alert rules down with them. A triage guide with Resource Graph queries, Sweden Central cost math for standard web tests and Basic Logs, and a checklist for the Functions v3, Service Bus SBMP and 1 October AI service deadlines.

September 19, 20261 039 visningarAzure & Cloud

GitHub's $120k Copilot Rust port: budget your own rewrite

GitHub ported the Copilot agent runtime from TypeScript to 832,378 lines of production Rust in about 14.5 weeks for roughly $120,000 in tokens plus three weeks of one developer's time, with a 96.22% prompt-cache hit rate and up to 18x faster in-process session startup. We break down the token bill into reusable unit costs, show why caching kept it around a sixth of the uncached price, and list the preconditions and EU residency checks to settle before budgeting your own agent-driven rewrite.

September 18, 2026672 visningarDevOps & Infrastructure

AWS lost Bahrain for good: your Azure region-loss plan

AWS confirmed on 15 September 2026 that data hosted only in its Bahrain region, and in one UAE Availability Zone, is permanently lost after Iranian strikes damaged multiple zones, proving that multi-AZ design protects availability but not against losing a whole region. For Azure teams in Sweden and the EU, the fix is a classified inventory, GZRS and geo-redundant backups for critical data, and early access to restricted pair regions such as Sweden South.

September 17, 2026495 visningarAzure & Cloud

Anthropic's CI hit 25x: your Azure Pipelines cost math

Anthropic reports CI jobs grew 25x in six months as agents took over 80% of code authoring, and the single-writer service behind its test selection failed in stages: 70 days of relief from a bigger machine, then 29, then less than one. Here is what that curve costs on Azure Pipelines versus GitHub Actions, and which architecture in your own pipeline breaks first.

September 16, 2026339 visningarDevOps & Infrastructure

Microsoft's AI code of conduct: what it does not cover

Microsoft AI published a draft Humanist AI Code of Conduct on 14 September 2026, committing its MAI models to absolute constraints on weapons, offensive cyber operations and resistance to shutdown, under a chain of command that operators and users cannot override. The scope line matters more than the constraints: the Code does not extend to third-party models Microsoft merely hosts, so GPT-5.6 in Microsoft 365 Copilot and Claude in Foundry sit outside it.

September 15, 2026297 visningarSecurity & Compliance

AI-run breaches in 3 hours: harden your Azure tenant now

Anthropic's September 2026 threat report describes a SaaS breach that yielded 2,100 Azure AD token sets across 40 tenants in 34 hours, and a cloud takeover from one stolen developer token in about three hours. Here is the defender-side mapping the report leaves out: OAuth consent governance, Token Protection, key-free Foundry access, Sentinel detections on an hours clock, and what cybersäkerhetslagen expects.

September 13, 2026374 visningarSecurity & Compliance

OpenAI Agents API: US-only residency, your Azure options

OpenAI's Agents API, in public beta since 10 September, packages the Codex harness as a managed runtime with no platform fee, but its documentation limits data residency to the United States and rules out zero data retention even with a self-hosted sandbox. A side-by-side with Claude Managed Agents and Foundry hosted agents, with Sweden Central retail rates, shows runtime cost is a rounding error and residency and identity decide the choice.

September 12, 2026606 visningarAI & Cloud Infrastructure

GPT-6 Astra migration on Azure: the GPT-5.6 Sol checklist

GPT-5.6 Sol retires on Foundry in January 2028, so moving to GPT-6 Astra is a choice rather than a deadline, and it touches more than a deployment name: tool calls must move to the Responses API, effort none and temperature disappear, and every line on the price sheet costs 2 to 2.5 times more. A phase-by-phase checklist built on Microsoft's migration process, OpenAI's model guidance and the Learn pages, with the Swedish residency caveat that keeps part of your traffic on Sol.

September 11, 2026756 visningarAzure & Cloud

GPT-6 Astra in Copilot, GitHub and Foundry: the admin map

GPT-6 Astra reached Microsoft tenants through four doors in 48 hours: Foundry, Copilot Cowork, Copilot Studio and GitHub Copilot, two of them on by default. Each door has a different operator, data path, meter and off switch, from OpenAI running as a Microsoft subprocessor inside the EU Data Boundary to GitHub billing at list price. Here is the map and the admin checklist for a Swedish tenant.

September 10, 2026608 visningarSecurity & Compliance

GPT-6 Astra capabilities: what it can and cannot do

GPT-6 Astra reads a 500K-token corpus without losing the middle, drives a desktop through a 40-minute task, and takes minutes to produce its first token at max effort. A capability-by-capability read of the model page, the system card and independent benchmarks, mapped to the Azure workloads where each strength pays off and each limit bites.

September 9, 2026898 visningarAI & Cloud Infrastructure

Spotify cut Claude Code tokens 90%: copy the pattern

Spotify routes bulk file reads and boilerplate generation out of Claude Code to a cheaper worker model, cutting Claude token usage on those reads by 90% in tests on a Java monorepo. The pattern needs no Portal licence: Claude Code hooks, two wrapper scripts and a flash-class model in Microsoft Foundry rebuild it inside your own Azure tenant, with the boundaries Spotify itself draws around editing and reasoning.

September 8, 2026367 visningarAI & Cloud Infrastructure

GitSpawn: a malicious repo can hijack your coding agent

A repository that arrives as a zip, sync folder or USB stick can execute attacker code the moment a CLI coding agent opens it, before any approval prompt and outside the agent sandbox. Manifold Security's GitSpawn disclosure covers eight findings across Claude Code, Codex, Cursor, Goose, Hermes Agent, Qwen Code and Grok Build, with four unpatched at publication.

September 7, 2026626 visningarSecurity & Compliance