Yes! It’s true! Windows 11 is an agentic platform.

os platforms

It always has been, but Microsoft didn’t realize it

OPINION In the time zone of the keynote, it's dystopia o'clock. These days, it always is. The fervent CEO prophet strolls around an empty stage, backlit by a giant altar of light on which they display their magic and impart visions of a future that address none of our fears, choosing instead to add to them. The format has as little variation as a church service, the whoops and cheers of the faithful as predictable as psalms. There are no industry awards for keynotes, even the most brazen hype machines can't go that far. Perhaps there should be. 

Taiwan's Computex had a great selection. Nvidia's Jensen Huang pushed RTX Spark, a repackaging of existing technologies — another keynote staple — as the next PC platform. It'll make local AI ubiquitous, freeing users from reliance on giant minds elsewhere. Or it would, if those giant minds weren't using all the memory you'll need. Pricey thing, privacy. 

Another, even more delightful dollop of digital darkness came from Qualcomm's Vogon Captain Cristiano Amon. His vision is of omniscient agents constantly monitoring everything you do on every device, combined with the sort of wireless traffic analysis via 5G that outperforms anything GCHQ and the NSA managed in the cold war. "Resistance is futile," he actually said. 

Which is curiously comforting. It replicates both Sun Microsystem's 1984 "The network is the computer" and the more notorious quote from Sun's then-CEO, Scott McNealy, in 1999 that: "You have zero privacy. Get over it." He, too, actually said it. Sun was defunct ten years later, and we still have privacy worth fighting for. Just. 

But the They Actually Said It Award in a keynote didn't come from Ol' Taipei, but rather the streets of that upstart city San Francisco. Here, the keynote for Microsoft Build 2026 was in the CEO-as-Ringmaster format, an option if your company does more than a couple of things. Here Satya Nadella, sadly lacking top hat, tails and a spangly waistcoat, wheeled on act after act culled from underlings blinking uncertainly in the LED lights. 

Yes, there were plenty of moments where things nobody wanted were presented as inevitable miracles. Shrunken models that might actually run in affordable memory because "sorry-not-sorry about the datacenters." Autopilot, an omniscient, omnipresent trickster god of an agent, that watches everything you do and wilfully inserts itself into your reality. A synthetic demo of agents wandering critical power plants gathering vulnerability data and integrating it into corporate IT. Why on Earth would you want a human doing that, anyway? It's all very exciting, and pffft, security is too trivial to mention.

Only — OMG — they did mention it. It came late, after the "We've put grep and Homebrew in Windows' fans service." Imagine shipping your OS with a CLI package manager, eh, Apple? Then, at last, agent security took the stage. In fact, there was a live demo of OpenClaw trying desperately to delete all the files on a desktop and failing. "Six months ago, that totally would have worked," they joshed.

The reason Microsoft can finally admit that agents are dangerous AF is because it has rediscovered what an operating system actually is and actually does. The thwarted OpenClaw was sandboxed in a Windows MXC container with very detailed permissions about what agents could access, who they could talk to, and so on. 

If this sounds familiar, it's because MXC marks Microsoft's discovery that agents need an ID that has to operate under rules and needs to be managed. In other words, once you realize that agents are just another kind of user, all the user and process focused protection of a modern OS can be brought to bear. It was sitting there all the time in the OS, because that's what we've had to evolve to keep things safe. Fancy that, eh?

None of this is much good as it stands for Qualcomm's unique cyberpunk dreams. Getting access to all of your services wherever you are, on your own terms,  is obvious and as old as silicon. The keynote actinic fever dream videos always show such access to be effortless — the Microsoft keynote had Project Solara showing just that  — but the MXCification of OpenClaw is anything but. It's a belated admission that trust and control are prerequisites of agent acceptance, and that currently you can only grok that if you know about menu diving through right-click granular system-level settings. 

The alternative at the moment is the slightly abstracted model for mobile apps, where the user has to tell the OS to grant or deny permissions as requested by the software. Just hitting accept every time is common, dangerous in apps, and devastating with agents. If the industry is serious about agentic AI, let alone multi-platform auto-porting agents, it needs to create and adopt common interfaces that monitor, manage, and protect wherever agents touch the users, user ID and user data. 

As Microsoft has now actually said, this is what OSes are designed to do.  It doesn't fit precisely into the shimmering nightmare future, but it does into one that's moderately shiny and not entirely unwholesome. That's a difficult proposition to work into a 2027 season keynote but what if it was? That would really be worth an award.  ®