Microsoft makes Execution Containers generally available

What changed

Developers define permitted files and network connections; the agent workload cannot expand its own permissions.

Source: Microsoft Windows Developer Blog

Our analysis

Builder’s view: test blocked actions as carefully as successful tasks, then grant only the access each workflow needs.

Keep in mind

MicroVM remains experimental. Some Windows management integrations are still forthcoming.

Source: Microsoft Windows Developer Blog