Microsoft is renting out its agent plumbing — and that's where your agent actually lives

Microsoft spent October 28 making a move that is easier to miss than the model launches it sits next to: the Copilot harness, the orchestration layer already running Copilot Code, Copilot Studio, the GitHub Copilot app, the CLI and VS Code, is now exposed to outside developers through Foundry Agent Service. The runtime is free until December 1, then it becomes consumption-billed. Worth understanding before your next agent platform decision, because it is where the interesting and the sticky parts of agent engineering both live.

A harness is the machinery wrapped around a model. A model can reason about a task; completing one takes an agent loop, working context that survives twenty tool calls, file handling, a sandbox, policy limits, and something deciding which model gets the next step. Microsoft's pitch is blunt and, to be fair, largely correct: most teams building agents keep re-implementing that same execution plumbing, and it almost never differentiates their product. Build the domain expertise — the instructions, the skills, the tools — and let somebody else maintain the boring part. The engineering pedigree here isn't nothing. The harness came out of GitHub's own multi-model work, was ported to Rust to cut session overhead and time-to-first-token, and routes across 20-plus frontier models with bring-your-own-key on top.

The catch is visible in how The New Stack framed it: easy until you want to switch. Microsoft says its platforms stay open and you can still bring your own framework, and the model choice genuinely is swappable. What isn't, in practice, is the execution layer. Your agents become declarative artifacts inside Foundry — invoked through the Responses API, running a loop you don't operate, inheriting governance, context management and routing decisions tuned for Microsoft's surfaces rather than yours. Long-running resilience for hosted agents went GA in the same announcement, which is precisely the kind of capability that quietly becomes load-bearing. Lock-in used to mean a model you couldn't swap. Increasingly it means a runtime you can't lift out of.

Source article image
Source image 1

For a small team that would otherwise burn a quarter hand-rolling tool-calling loops, this is a reasonable trade — free preview until December 1, then pay for what you consume. The discipline it requires is to price the two things separately during evaluation. Ask what survives porting: your skill files, instructions and tool definitions travel fine. The behavior you grew to rely on — how context compacts, how a stuck task resumes, how a policy violation is handled — stays behind. I'd take the managed runtime for prototypes and internal tooling, and keep anything customer-facing documented well enough that a future migration is a project rather than an archaeological dig.

Practitioners who have run agents on a managed runtime: when you eventually moved, what actually broke — the prompts, the tool plumbing, or the behavioral assumptions nobody wrote down?

Source article image
Source image 2

Sources

Comments

Popular posts from this blog

AI Is Starting to Feel Less Like a Gadget and More Like Infrastructure

When Two AI Bots Finally Learned to Talk in Discord

2.9 Billion Commits a Month, and Nobody Asked Who Checks Them