The hands got a sandbox, the memory got none
Agent commands got a real sandbox this week. Copilot's memory got no audit log at all.
This week's thread: containment arrived where it can be measured
Tool execution is now gated by an operating-system policy. What Copilot learns about your organization is gated by a checkbox. Filesystem calls are easy to police and inferences are not, which is why the second needs a decision rather than a default.
Signal of the week
Copilot memory learns from your work data
Enhanced Copilot memory rolls out this month and draws on Outlook mail, Teams chats and meeting transcripts. Enhanced personalization is on by default, and admins cannot restrict what memory stores. Memory actions write no Purview audit entries, and retention policies do not apply. The capability is labelled preview.
Why it matters
When a client asks for the log there is none, so I would set enhancedPersonalizationSetting before they ask.
1The hands got a sandbox
Copilot commands now run in a sandbox your admin can force
Local sandboxing is generally available in the Copilot CLI, the Copilot app and VS Code Agent Host sessions, at no extra cost. Policies restrict filesystem, network and credential access, and enterprise settings can enforce them so developers cannot weaken them.
Why it matters
This is a boundary rather than an instruction. I have not run it under load, so I would pilot it on one team first.
2A skill is now something you record
Skills now arrive three ways
Record a Skill reached PowerPoint on 7 October, generally available with no admin action. Thirty Dynamics 365 CRM skills reached general availability in Cowork, and the Copilot Agent Kit now reviews skill files in preview.
Why it matters
A recorded skill has no named owner, and ownership is the field governance rules read.
3A deadline, and a registry on the way
Targeted Release retires in January
Targeted Release retires in January 2027. Microsoft asks admins to act by 31 October, because enrollment changes lock in November. Frontier, Standard and Deferred replace it.
Why it matters
Frontier becomes the only route to previews, so check who your pilot ring really is.
Copilot Studio gets a shared plugin registry
Roadmap 570669 puts a shared plugin registry in Copilot Studio: preview October, general availability November. Learn's what's-new still ends at September, so there is no documentation to check it against.
Why it matters
It fixes makers rebuilding connectors as HTTP calls with a stored secret. I do not know yet whether the Agent 365 block list covers it.
4Also this week
- QuickClaude Haiku 5.5 is generally available in GitHub Copilot and enabled by default unless an admin turns off new-model enablement.
- QuickRecord a Skill in PowerPoint is generally available with no admin action, per Message Center MC1490903.
- QuickScheduled Triggers for desktop flows is marked launched on the roadmap, so no cloud flow is needed to start one.
- QuickWord, Excel and PowerPoint editing now runs inside the Copilot app, for Frontier customers.
- QuickExtended Markdown for agent messages is generally available for all Teams users.
- QuickFrom 1 April 2027 the affected Graph file APIs stop returning pre-authenticated URLs, so agents must use Entra tokens.
- QuickAgent 365, Foundry and Defender XDR were quiet this week.
Voices to follow
- Microsoft EVP - Copilot, Agents & PlatformCharles Lamanna
Executive Vice President for Copilot, Agents, and Platform at Microsoft. He owns the strategy behind Copilot Studio, Agent 365, and the Power Platform, so when the agent stack's direction shifts, it usually shifts because of a decision his org made.
Microsoft EVP - Copilot, Agents & Platform - Microsoft Principal Cloud Advocate - Power Platform Advocacy LeadApril Dunnam
Principal Cloud Advocate and Team Lead for the Power Platform Advocacy team at Microsoft, and the face of Agent Academy. If a Copilot Studio feature or governance update ships, April has usually broken it down within 48 hours.
Microsoft Principal Cloud Advocate - Power Platform + AI Demystifier - Microsoft Software Engineer - CoworkBas Brekelmans
Software Engineer at Microsoft, started the Copilot Cowork project and previously CTO of Copilot Studio. The clearest voice on why Microsoft chose multi-model, MCP, and A2A architecture across the agent stack.
Microsoft Software Engineer, Cowork - ex-CTO Copilot Studio - Microsoft Principal Cloud Developer Advocate - AISeth Juarez
Principal Cloud Developer Advocate at Microsoft on AI. One of the most watchable explainers of Foundry, the Agent Framework, and GitHub Copilot for developers - deep technical content that stays accessible.
Microsoft Principal Cloud Developer Advocate - AI - Microsoft AI Developer Relations - GitHub CopilotBurke Holland
AI Developer Relations leader at Microsoft, one of the most-followed voices on GitHub Copilot, VS Code, and AI-assisted coding. The place to see agent mode and the coding-agent workflow demoed for real.
Microsoft AI DevRel - GitHub Copilot + VS Code - Microsoft Principal Cloud Advocate - Power Platform + agentsDaniel Laskewitz
Principal Cloud Advocate at Microsoft, ex-Power Platform MVP and co-founder of Forward Forever. One of the clearest voices on multi-agent systems and Power Platform governance - the bridge between the maker community and the product teams.
Microsoft Principal Cloud Advocate - Power Platform governance + agents - Microsoft CVP - Security, Compliance, Identity & PrivacyVasu Jakkal
Corporate Vice President for Microsoft Security. Defender's AI agent posture risk, the Agent 365 security integration and the wider security-for-AI story all ship out of her organisation.
Microsoft CVP - Security, Compliance, Identity & Privacy - Copilot Studio MVPLisa Crosbie
6x Microsoft MVP, Practical AI for Business with Copilot and Agents at Barhead. Calm, hands-on voice on production-grade agent design - the one to follow when you want patterns you can ship, not just demo.
6x Microsoft MVP - YouTuber + International Speaker - ~21K followers
Coming up
- 31 October 2026 · Targeted Release act-by datepick a ring.
- November 2026 · Copilot Studio shared plugin registry reaches general availability
- November 2026 · Flowchart mode for desktop flows
- 16 November 2026 · Dataverse prompt column backfill reaches general availability
- 17 to 20 November 2026 · Microsoft Ignite
- 1 April 2027 · Graph file URLs need Entra tokens
This week's question
If a user records a skill and Copilot forms a memory about their work, who owns either when that person leaves? I lean toward the organization. I have not found a Microsoft document that says.
Get Agentic Weekly in your inbox
Every Monday morning. Unsubscribe any time.