Microsoft event debuts new AI-friendly hardware and Windows changes

Microsoft Execution Containers

For those who might still feel a little trepidation about turning over their entire digital lives and files to AI bots, Microsoft announced the availability of Microsoft Execution Containers (MXC), a security framework designed to keep agent activities confined to a sandbox. Available to developers today, the framework allows system admins and organizations to monitor active agents working within their systems and to specifically set guardrails for each, ensuring control over exactly what each agent is able to access.

MXC acts as a policy layer that directs compute traffic to the appropriate isolation backend. Depending on the workload, MXC can shift to a process container, session container, WSL container, or even an experimental hardware-backed isolation called MicroVM.

The hybrid approach

Bringing all of this new agentic workflow together with traditional Windows is a concept that Microsoft calls “Hybrid Intelligence,” which is a move away from cloud-backed AI solutions and a move toward local ones. Hybrid Intelligence will allow Surface Laptop Ultra or RTX Spark Dev Box users to allocate memory as they see fit for any specific application, as well as offer native support for local frameworks like llama.cpp and models from the Deepseek and Nvidia Nemotron families.

We’ll see if it works soon enough

Microsoft is betting big on local AI with the changes announced today, but questions about security and user acceptance still remain, especially in light of their past missteps and other recent AI agent mishaps. The Surface Laptop Ultra hits shelves next week—keep an eye out for our review, and we’ll try to figure out whether it’s worth the $2,599 entry price and what this local AI capability buys you.