Tessera

Not all AI orchestration should be autonomous. Durable Functions for when the steps are known: function chaining, fan-out/fan-in, human-in-the-loop, monitor, risk-class routing. Five C# patterns verified on Azure. sjwiggers.com/2026/08/18/d...

Durable Functions as the Orchestration Layer for Directed Agentic Workflows - Cloud Perspectives

Durable Functions is the right orchestration layer for directed agentic workflows — predictable steps, fault tolerance, human-in-the-loop, and long-running execution. This post maps the patterns.

sjwiggers.com

I built nine agentic AI design patterns for real on Azure, not just as diagrams. Cosmos DB has its own separate RBAC system that silently grants nothing, and "Azure AI Foundry" is secretly two incompatible resource types. More: sjwiggers.com/2026/08/15/a...

Agentic AI Design Patterns on Azure - Cloud Perspectives

What actually breaks when building agentic AI on Azure PaaS: real errors and fixes from deploying 9 agentic AI design patterns end to end, not just the diagrams.

sjwiggers.com

Expedia open-sourced mockql-rs: LLM-generated GraphQL mocks at request time, merged with live backend data in one response. Airbnb did it at build time in April. The GraphQL RFC says no network call. Three architectures, two use @mock. www.infoq.com/news/2026/08...

LLM-Generated GraphQL Mocks Arrive at Airbnb and Expedia, While the Spec Lags Behind

Expedia Group has open-sourced mockql-rs, a Rust CLI that fills @mock-annotated GraphQL fields with LLM-generated data at request time. It follows Airbnb's @generateMock in April and a GraphQL Foundat...

infoq.com

MCP dropped protocol sessions. The under-covered part: Mcp-Method and Mcp-Name are now required headers, so a gateway or WAF can govern agent tool calls without parsing the JSON body. HN split on whether that just makes it REST again. www.infoq.com/news/2026/08...

MCP Goes Stateless, and Developers Ask Whether That Just Makes It an API Again

The MCP 2026-07-28 specification removes the initialize handshake and session header, and adds required method and tool-name headers so gateways can route agent traffic without parsing JSON. Reaction ...

infoq.com

Three files replace an agent loop on Azure Functions. .agent.md, agents.config.yaml, mcp.json — the runtime handles registration, wiring, and the loop. New post: how it works and when to use it over Foundry Agent Service. sjwiggers.com/2026/08/13/a...

The Azure Functions Serverless Agents Runtime Explained - Cloud Perspectives

The Azure Functions serverless agents runtime lets you build event-triggered agents as function apps. When to use it over Foundry Agent Service.

sjwiggers.com

A RAG diagram promised "zero hallucination". I built it and measured it. Keyword search made retrieval worse: 7/11 vector-only, 6/11 hybrid, 11/11 with the reranker. Confident diagrams are cheap to draw. Building one shows what's real. sjwiggers.com/2026/08/12/n...

The Four Things Naive RAG Diagrams Leave Out - Cloud Perspectives

Naive RAG diagrams leave out four things that decide whether your pipeline works. Measured results on Azure AI Search, with a runnable sample repo.

sjwiggers.com

citadel-v1 of the AI Hub Gateway Solution Accelerator is out. New integrations should target /unified-ai/v1/*. Access contracts ship at 1.2.0; multi-provider routing is first-class. Wrote up what changed and what to do about it: sjwiggers.com/2026/08/12/c... #azure #apimanagement #agenticai

Citadel Grew Up: What the citadel-v1 Release Means If You Built on the AI Hub Gateway. - Cloud Perspectives

The citadel-v1 AI Hub Gateway release reframes the accelerator as Layer 1 of Microsoft's AI Citadel Blueprint. Here's what changed and what to migrate.

sjwiggers.com

Identity without governance: a secure platform you can't prove is secure. Governance without identity: a documented platform anyone can walk into. You need both — the layer most Azure write-ups skip: sjwiggers.com/2026/08/11/a...

Azure Governance and Identity for Integration Architects - Cloud Perspectives

Explore Azure governance and identity to ensure compliance and security in your integrations. Learn why they matter.

sjwiggers.com

Azure API Management's new AI Gateway tier fronts Foundry, AWS Bedrock and Vertex AI models behind one endpoint, with policy cards instead of XML. Runtime keys are gateway-scoped though, and no coexistence story for existing gateways. www.infoq.com/news/2026/08...

Azure API Management Adds Dedicated AI Gateway Tier, Governing Models and MCP Tools

Microsoft released a dedicated AI Gateway tier of Azure API Management in public preview, with a control plane built around models, MCP servers and tools rather than APIs. It fronts Foundry, Bedrock, ...

infoq.com

CosmosEscape: one Gremlin query, sandbox escape, then a platform-wide key with read/write on every Cosmos DB database. Hotfix in 2 days. Removing the key took until July 2026. Nothing customers could patch, and no way to verify the fix. www.infoq.com/news/2026/08...

Wiz Discloses CosmosEscape, and Practitioners Debate What Customers Could Have Done

Wiz Research disclosed CosmosEscape, a chain that escaped Azure Cosmos DB's Gremlin sandbox and reached a platform-wide key granting read and write access to every database on the service. Microsoft b...

infoq.com

Logic Apps Standard closed a real gap: dev and prod now use one Managed Identity model; no connection-string swap before deploy. Wrote up why that's a bigger Zero Trust deal than it looks, plus a working sample. sjwiggers.com/2026/08/06/m...

Managed Identity in Logic Apps Standard: A Zero Trust Read - Cloud Perspectives

Logic Apps Standard now runs Managed Identity locally and in production. Here's why that closes a real Zero Trust gap and what RBAC still owes you.

sjwiggers.com

Steef-Jan Wiggers @steefjan.bsky.social · 4w ago

The least interesting question about the integration data layer is SQL vs Cosmos. The real work: idempotency stores for duplicate deliveries, the outbox for dual writes, durable state for long-running workflows. sjwiggers.com/2026/08/05/a...

Azure Data Patterns for Integration Architects - Cloud Perspectives

Explore Azure data patterns to understand how integration impacts data storage and processing beyond just selecting a service.

sjwiggers.com

Roughly 98.4% of a production coding agent is harness infrastructure. Only 1.6% is AI decision logic. Which is why Microsoft shipping a supported harness, not just an SDK, is the story. Where agents run, what they touch, whose policy. www.infoq.com/news/2026/08...

Microsoft Agent Framework Harness and Hosted Agents Reach General Availability

Microsoft's Agent Framework now ships a supported runtime. Build 2026 brought the Agent Harness, the GitHub Copilot and Claude Agent SDK connectors, and the orchestration patterns to stable release; t...

infoq.com

Steef-Jan Wiggers @steefjan.bsky.social · 4w ago

Took the FinOps "token economics" framework and held it against a real APIM gateway. Attribution and caching: solid. Goodput, yield, routing: honest gaps. And multi-agent token math is not linear: chains compound context. sjwiggers.com/2026/08/04/t...

Token Economics: Understanding AI Cost Management - Cloud Perspectives

Explore token economics in AI cost management and discover how the Citadel Platform implements these concepts effectively.

sjwiggers.com

Three ways to host MCP servers on Azure Functions — not interchangeable. GA binding extension. Preview self-hosted SDK (Streamable HTTP only). Queue-based option that skips MCP when async decoupling is what you need. sjwiggers.com/2026/07/30/h...

Hosting MCP Servers on Azure Functions: GA vs. Preview - Cloud Perspectives

Hosting MCP servers on Azure Functions gives you three options: the binding extension, self-hosted MCP SDKs, and queue-based tools, and tells you which to use when.

sjwiggers.com

The Citadel series wraps: registering an agent in the AI registry via Azure API Center. Every agent carries a structured AI Publish Contract: what it is, what data it touches, who owns it. sjwiggers.com/2026/07/29/c... #azure #apicenter #euaiact

Registering a Citadel Agent in the AI Registry: Azure API Center - Cloud Perspectives

Learn how to register an AI agent in Azure API Center using the AI Publish Contract pattern, and how it supports EU AI Act Article 49 transparency.

sjwiggers.com

Airbus scored cloud providers on protection from non-European extraterritorial law, right next to scalability and AI. Scaleway won. Not an AWS exit: a sovereign tier for exposed workloads, hyperscaler for the rest. www.infoq.com/news/2026/07...

Airbus Makes Protection from Extraterritorial Law a Scored Criterion in its Cloud Tender

Airbus selected Scaleway as its sovereign cloud provider after a tender that scored protection against non-European extraterritorial legislation alongside technical capability. Airbus frames it as com...

infoq.com

Months in the Logic Apps agent loop, so my first reaction to Automation wasn't "nice designer." It's that apps are private by default; your compliance team can't see what they do. Wrote up the governance angle + a demo: sjwiggers.com/2026/07/28/l...

Logic Apps Automation Preview - Cloud Perspectives

Logic Apps Automation is in public preview. An architect's view of the new SKU, the governance boundary it introduces, a demo you can build, and what it cannot do yet.

sjwiggers.com

KBaaS in Azure Logic Apps removes the hard part: the rag pipeline. Upload documents → parse, chunk, summarise, embed into cosmos db. no ai search needed. Built an hr policy agent + github sample. five undocumented notes in the post. sjwiggers.com/2026/07/23/logic-apps-knowledge-base-as-a-service/

Knowledge Base as a Service in Azure Logic Apps - Cloud Perspectives

Build a RAG-powered HR policy agent using Knowledge Base as a Service in Azure Logic Apps.

sjwiggers.com

Integrate 2026 brought some Logic Apps announcements: Logic apps automation · Knowledge as a service · Foundry agent integration · Standard SDK · Connector namespace sjwiggers.com/2026/07/22/logic-apps-integrate-2026-announcements/ #azurelogicapps #integrate2026 #azure #enterpriseintegration

Azure Logic Apps at Integrate 2026: The Announcements - Cloud Perspectives

Azure Logic Apps Integrate 2026 announcements signal a platform shift. This post unpacks five announcements every integration architect should know and what they mean in practice

sjwiggers.com

AWS showed customers estimated bills in the trillions. Its own alarms fired but paged nobody; customers escalated 4.5 hours later. Mitigation? Disabling budget and cost anomaly alerts platform-wide. www.infoq.com/news/2026/07...

AWS Billing Bug Shows Customers Trillion-Dollar Estimates While Its Own Cost Alarms Fail to Act

A configuration change in AWS's bill computation system showed customers estimated bills in the billions and trillions of dollars for over 24 hours. AWS's own alarms detected the anomalies but failed ...

infoq.com

Citadel series continues: the five APIM gateway policies, in depth. Token limiting, semantic caching, content safety, cost attribution, and PII redaction one gateway, every call governed. sjwiggers.com/2026/07/21/c... #azure #apimanagement #aigovernance

Citadel APIM Gateway Policies Azure: A Deep Dive - Cloud Perspectives

Deep dive into five Citadel APIM gateway policies on Azure — token limiting, semantic caching, content safety, cost attribution, and PII redaction with real policy XML, live demos, and pitfalls from a...

sjwiggers.com