Monthly Archives: October 2026

Upgrading Foundry Models and SDKs: Treat Compatibility as a Release Decision

A dependency upgrade passes compilation and the agent answers a test question. The release reaches production, where a browser client fails to load, a background response resumes incorrectly, or telemetry costs change. The package installed successfully; the application contract still changed.

Foundry upgrades deserve the same release discipline as database clients and application frameworks, with an additional check for changes in model behaviour. Evaluate compatibility and task quality together, while keeping their causes distinguishable.

Upgrade a recorded configuration

Microsoft’s September roundup, published October 15 documents language-specific SDK changes rather than one universal upgrade path. For example, it identifies JavaScript browser-bundling fixes in version 2.7.1 and a .NET Projects line that remained beta. A stable package in one language does not establish equivalent feature maturity in another.

The same roundup calls out runtime defaults, including 100% default Azure Monitor trace sampling in AgentServer Core’s discussed release. That is a configuration detail, not a performance statistic. Review it against expected traffic, privacy requirements, and telemetry budget before rollout.

Create a baseline record containing package versions, runtime image, protocol, model deployment, prompts, tools, retrieval configuration, and policies. Include indirect dependencies and the deployment configuration used by the running service. A lockfile alone may not capture all of them.

Change one major dimension at a time where practical. If the immediate goal is to fix a client issue, hold the model configuration constant. If the goal is to compare a model, retain the known-good SDK path. This makes failures easier to attribute.

Test the interfaces the application actually uses

Build a compatibility matrix around real application paths: authentication, resource creation, streaming, tool invocation, structured output, file handling, and cancellation. Do not require every possible feature to pass if the application does not use it.

Run the client in its actual environment. A server-side test does not establish that browser bundling works. A local interactive credential does not establish that the deployed workload identity has the intended permission.

Inspect stream handling as a protocol, not just a text result. Confirm event order, partial output, tool events, final status, and error handling. A user interface that shows generated text but misses a terminal failure can misrepresent an unfinished operation as completed.

The September Agent Framework article explains that recovery can replay interrupted steps and that external effects still require idempotency. Verify the application’s write behaviour after interruption. Recovery support should not become a reason to remove reconciliation logic.

For a hypothetical procurement assistant, test a timeout after submitting a purchase request. The recovered agent should query the existing operation and return its confirmed state. Creating a duplicate request is a compatibility failure even if the new SDK handles reconnection exactly as documented.

Evaluate the business behaviour separately

Microsoft’s model lifecycle guide recommends comparing candidate configurations against workload-specific baselines. Use the same source snapshot, task inputs, and evaluation criteria for the candidate and current release.

Include representative ordinary work, known incidents, ambiguous requests, and cases that require refusal or escalation. Review correctness, evidence, policy compliance, tool arguments, and final business state. Keep important task classes separate in the report.

The Model Router evaluation guide provides a useful quality, cost, and latency comparison approach. If the application uses routing, record the selected-model distribution where available. Otherwise a change in routing behaviour can look like an SDK effect.

For model-based judging, retain the evaluator configuration and calibrate it against domain review. A change in evaluator behaviour should not silently redefine the release gate. Deterministic checks should handle schema validity, authorization boundaries, and verifiable transaction state.

Do not interpret a small clean test as proof that rare failures disappeared. As an illustrative calculation, if 300 independent, representative trials show zero occurrences of a particular failure, the one-sided 95% binomial upper bound is approximately 0.994%: one minus 0.05 raised to the power of one divided by 300. This is a statistical illustration, not a measured Foundry result.

The assumptions matter. Closely related prompts are not necessarily independent, and a convenient test set may not represent production. Use the calculation to explain uncertainty, not to assign a misleading assurance percentage to the whole application.

Stage the release around observable outcomes

Start in a non-production environment with synthetic or permitted test data. Verify migrations and configuration changes before sending production requests.

Use shadow evaluation only where its access and data handling are authorized. Keep side-effecting tools disabled or replaced with controlled test equivalents. A shadow run must not submit a second purchase request or send duplicate communication.

For a limited live rollout, monitor accepted tasks, review corrections, latency, tool failures, repeated actions, and total cost. Compare with the baseline over a meaningful task mix rather than using only request volume.

Set stop conditions before deployment. A wrong-authority action, repeated external write, or critical task regression may justify immediate containment even if average quality improved. The business owner should define those priorities with the application team.

Make rollback include unfinished work

Keep the prior application configuration available while evaluating the candidate. Confirm that required model deployments and supporting resources remain usable under the intended rollback plan.

Identify how active sessions, persisted state, and unfinished background work behave across versions. A prior runtime may not understand state written by the candidate. Resolve that compatibility question before relying on rollback during an incident.

Separate restoring a version from repairing business effects. Reverting code does not cancel an order or retract a message. Use the operation log to reconcile tasks that crossed the release boundary.

The release record should explain the reason for upgrading, evidence of compatibility, quality and cost results, remaining limitations, and the recovery plan. Assign an owner to the decision and a date to revisit temporary exceptions.

A useful upgrade delivers a specific improvement without losing control of the application’s behaviour. Newer versions create opportunities. Reproducible tests, staged exposure, and business-state verification determine whether the change belongs in production.

References

Microsoft: September Foundry roundup, October 15, 2026

Microsoft: Agent Framework interactive and resilient execution updates, September 24, 2026

Microsoft: Model lifecycle guide, June 2, 2026

Microsoft: Model Router evaluation guide, May 19, 2026

Fabric Data Agents: A Production Readiness Guide for Enterprise Teams

A finance manager asks, “Which customers explain the decline in margin this quarter?” A convincing answer appears within seconds. Before that answer influences a forecast, three questions matter: Did the agent calculate the right measure? Did it respect the manager’s access? Can the team reproduce the result after changing the model or instructions?

For enterprise leaders, these are delivery requirements. A conversational interface becomes useful when people can act on its answers with a known level of confidence. This guide proposes a practical release process for Fabric data agents, with a finance example and explicit checks before adding Microsoft Foundry orchestration.

Know which capability you are adopting

As checked on October 13, 2026, Microsoft’s Fabric data agent concepts documentation describes the core feature as generally available. The SDK evaluation feature and Foundry integration through Fabric IQ are still documented as preview. Treat those as separate adoption decisions. General availability of one component does not establish the release status of the entire solution.

The current platform name is Microsoft Foundry, replacing the Azure AI Foundry brand. Fabric provides the data-questioning component; Foundry can orchestrate a broader application. A Fabric data agent maintains read-only data connections. Updating an ERP record would require a separate action tool and its own controls.

1. Define a narrow business contract

Consider an illustrative distributor with a Power BI semantic model containing revenue, cost, customer, and fiscal-calendar measures. Regional managers need weekly margin explanations. Begin with this scope rather than connecting every available source.

Agree with finance on what “margin” means, which currency applies, how returns are treated, and whether quarter means fiscal or calendar quarter. Record the data refresh timestamp alongside the expected answer. For financial measures, my recommendation is to start from approved semantic-model measures so the pilot evaluates an established definition.

A useful answer contract includes the reporting period, authorized region, measure definition, result, and any missing data or qualification. An unexplained number should fail review even when it happens to match. This contract is a proposed acceptance standard, not a guarantee that the product automatically supplies every field.

2. Build an evaluation set before tuning

Start with 40 representative questions, an illustrative pilot size rather than a Microsoft requirement. Include routine totals, comparisons, ambiguous wording, incomplete data, and requests outside scope. Finance should approve expected answers from a fixed data snapshot. Keep some questions out of the tuning set to test generalization.

Useful cases include “Show net revenue for the last completed fiscal quarter,” “Why did margin fall?” and “Compare my region with every other region.” The second should clarify the period or metric when needed. The third should reveal only authorized data. Expected behavior can be clarification or refusal; it need not always be a number.

Microsoft’s evaluation workflow accepts question and expected-answer pairs, runs an evaluation, and provides summary and detailed results. Its documentation requires an agent published to the stage being evaluated, production or sandbox. Use an isolated test workspace and restricted audience for this step. Publishing a Fabric agent version is distinct from releasing the application broadly.

The evaluator uses a critic prompt to judge answer equivalence. My recommendation is to supplement that judgment with numerical checks and finance review of failures. An automated score alone cannot establish that the correct period, currency, or business definition was used. This article describes a validation approach; no SDK code or live workload was executed for it.

3. Test access with consumer identities

The sharing and permission documentation says consumers need access to both the data agent and its underlying sources. For Power BI semantic models queried through a Fabric data agent, Read permission is sufficient; workspace membership and Build permission are not required for that interaction. Other entry points can have different permission requirements.

Run the same evaluation questions as a regional manager, a central finance analyst, and a user without source access. Check row and column restrictions where configured. Confirm that denied queries do not surface protected values through explanations or follow-up questions. Testing only with a workspace administrator would miss the actual consumer experience.

Use permissions to enforce boundaries. Instructions can describe appropriate behavior, but they should never substitute for access control. Preserve the identities and effective permissions used in each test so future releases can repeat the same checks.

4. Review geography and the orchestration boundary

Current prerequisites include paid F2 or higher Fabric capacity, or P1 or higher Power BI Premium capacity with Fabric enabled, plus source access. The tenant-settings guidance, updated September 29, 2026, explains when cross-geography processing and storage switches are required, including capacities outside the EU data boundary and the US. Review the applicable settings with your administrator rather than enabling them blindly.

For the preview Fabric IQ integration, verify a supported full-Fabric region, a Foundry project with a deployed model, the same tenant, the same signed-in account, and required permissions. The documented connection uses delegated user authentication. Responses may leave Fabric’s compliance boundary or geographic region and become subject to Foundry’s handling terms. Data location review must cover both services.

Add orchestration after validating the Fabric agent itself. Then test the complete path again: source selection, Fabric answer, and Foundry’s final response. A correct tool result can still become a misleading summary. Keep any transaction-changing tool behind a separate authorization decision.

5. Release against quality and business measures

For this hypothetical pilot, set an initial target of at least 95% correctness on approved routine questions, with no observed unauthorized disclosures in the defined test set. These are proposed gates, not vendor benchmarks or evidence of zero risk. Review material errors individually instead of hiding them inside an average.

Measure median time to a verified answer, analyst correction rate, clarification frequency, and cost per accepted answer. Include capacity and model usage, evaluation effort, and human review in the cost calculation. Compare with a manual baseline using equivalent questions and data.

Suppose 300 monthly requests each save ten minutes after verification. That would represent 50 hours of potential capacity, an illustrative calculation rather than a forecast. Track realized savings before extending the agent to another domain. Version the configuration and evaluation set, rerun them after material changes, and retain a fallback to established reports.

The broader platform context is covered in my earlier enterprise AI architecture article. The next decision is concrete: identify the questions the agent must answer, the access it must enforce, and the evidence required for release. That gives architects and business sponsors a shared basis for approval.

References

Microsoft Learn: Fabric data agent concepts and release status

Microsoft Learn: Evaluate your data agent, preview

Microsoft Learn: Sharing and source permissions

Microsoft Learn: Required tenant settings and cross-geography handling

Microsoft Learn: Consume a data agent through Fabric IQ, preview

Microsoft Learn: Microsoft Foundry overview and current terminology