SaaS

ServiceNow’s AI Passport Promises Runtime Authority—Who Enforces It at Each Handoff?
A portable permission claim needs a receiving runtime that can enforce it. ServiceNow’s announcement leaves platform teams with specific handoff tests to demand.

Workday Says Agents Can Query Live HR Data—Which Identity Sets the Boundary?
Workday’s headless-access announcement leaves platform teams with a concrete implementation question: whose permissions govern each live workforce-data query?

Claude’s New Traces Can Debug Agent Runs. They Can Also Export the Conversation.
Anthropic’s tracing beta gives platform teams two instrumentation routes—and a decision about which conversation data reaches their observability provider.

SolarWinds Avior Promises IT Remediation, but Rollback Remains Workflow-Specific
Avior’s operational promise makes recovery a central pilot question: what happens when a permitted change needs to be reversed?

GitHub Adds Anthropic Key Blocking. Are Your Private Repositories Covered?
GitHub’s new Anthropic detectors raise a practical question: which repositories actually have a preventive control enabled?

Atlassian MCP v2 Adds 220+ Tools. What Platform Teams Need to Verify.
The expanded hosted server separates tool discovery from execution. Its internal token-efficiency claim leaves permissions, enriched-context charges, and client migration for teams to assess.

Microsoft Copilot Usage Billing: What Can Admins Budget for Agent Work?
Microsoft distinguishes everyday Copilot subscriptions from metered agent work. New controls could help administrators govern usage, but credits are not dollars and dashboards are not invoices.

Gemini Adds 14 Connected Apps. Which Ones Can U.S. Users Actually Use?
Google’s Connected Apps rollout expands Gemini’s links to outside services. Its detailed eligibility table shows why the launch list is only a starting point for U.S. users.

Claude Marketplace Puts Partner Software Within Reach of Anthropic Commitments—but Terms Remain Unclear
Claude Marketplace unifies integrations, partner software and services. Enterprise buyers can use some Anthropic committed spend, but key limits remain unclear.

UiPath Cartographer Reaches GA, but Its Map of Work Still Needs Human Proof
UiPath Cartographer is now generally available, promising to turn scattered process knowledge into a governed Map of Work and generate design documents for automation. The useful question for buyers is whether its provenance and approval controls can overcome incomplete source material, unclear pricing, and tenant-bound projects.

Kiro’s Supervised Diff Was Not a Firewall. AWS Says Upgrade and Rotate Credentials.
AWS says older Kiro IDE versions could expose workspace data through an agent-written setting before a pending diff was resolved. Here is who should upgrade and rotate credentials.

DeepSeek V4.1-Flash Makes AI Cost a Cache Problem
DeepSeek’s new open-weight model promises to shrink the memory bill for long-running agents. The engineering claim is meaningful, but buyers still have to price the whole workflow—not just the token line item.