Agent platforms usually fail in the gap between the demo and the incident review. Microsoft’s latest Hosted Agents update is interesting because it spends most of its calories in that gap: isolation, identity, filesystem state, traces, versioning, evals, guardrails, voice transport, rollback, and deployment plumbing. In other words, the