Mary Branscombe's avatar

This came out while I was on holiday; some thoughts for The New Stack about how operationalising agents requires a different kind of infrastructure from what you need for familiar enterprise workloads.

Mary Branscombe's avatar

You need an environment that looks a bit more like serverless with fast startup times, but also handles long-running, bursty, intermittent workloads that might scale to zero while waiting for a response and then need to restart just as fast.

Mary Branscombe's avatar

You still need identity and security; that's more complicated because you need to both give agents access and potentially protect your systems from them because they run untrusted code relentlessly to achieve the goal you've given them.

Mary Branscombe's avatar

You definitely want external gateways applying governance so agents can't hack the sandbox to achieve goals (see relentless!). Plus you need the agent to be able to take actions, in your existing business systems, using your existing workflows: so access to tools and services you want agents to use.

Mary Branscombe's avatar

The new Azure Container Apps Sandboxes and Azure Container Apps Express are custom made for those needs, Microsoft tells me. The Foundry team already built the Microsoft Foundry Agent Service on top of them and organisations who want to make their own agent platform can do that too.

This is part of a (sponsored) series I'm going about Microsoft services and tools for getting the most out of AI agents, and the infrastructure side of this is really interesting because it's a workload with a lot of familiar needs but some really different ones too, and as I'm researching and writing I keep coming across real-life examples of why these issues matter.

If OpenAI had put the governance of its agent in an external gateway rather than in the internal sandbox, it wouldn't have mattered that the private registry had a live internet connection they'd forgotten about: the gateway would have stopped it using that to get out and hack Hugging Face.

The rise of the agent runtime: The compute platform behind production agents
Picking an AI model won't guarantee good agents. Here's why the runtime — fast startup, durable state, security, isolation — is what makes them work.
https://thenewstack.io/agent-runtime-application-server
  • agentic AI

  • agentic infrastructure

  • agent sandbox

  • agent platform

  • Azure Container Apps Sandboxes

  • Azure Container Apps Express

  • Microsoft Foundry

  • Auger