Copilot license and repository accounts can now differ: keep attribution intact
The Copilot app and VS Code now let one account hold the Copilot license and another reach the code. What that changes for identity, telemetry and audit.
5 min read
Blog
The SpanDock blog
News, how-tos and researched articles on AI coding tools, agents, MCP, cost and governance, from the SpanDock team.
Copilot's Agents window and worktree cleanup: running many agent sessions
VS Code 1.141 adds a session grid and worktree cleanup for parallel Copilot agents. What changed, and the review and disk habits that parallel sessions need.
NCSC's sandbox maturity levels for agentic AI, explained for engineering leads
The NCSC grades agent sandboxes on two four-level ladders, network and compute. How to use them as a scorecard now that local agent sandboxes are shipping.
5 min read
Secret scanning now blocks Anthropic keys at push: closing the AI key gap
GitHub now blocks Anthropic API keys at push by default and is previewing AI-based secret detection. What changed, what is still preview, and what to do.
5 min read
Sol, Sonnet 5.5 or Haiku 5.5: a practical coding model map
Three coding-relevant models landed within ten days. Rather than picking one default, map task types to model tiers and check vendor benchmarks with care.
Anthropic's Max and Team API credits: how they change agent experiments
Claude Max and Team plans now include monthly Claude Platform credits for building agents. What they cover, what they exclude, and what finance should track.
5 min read
Frontier coding models and cyber safeguards: public vs defender access
Gemini 4 Argon, Claude Sonnet 5.5 and GPT-6.1 Sol ship with cyber restrictions, and defender access is a separate track. How to tell which tier your team has.
5 min read
NVIDIA OpenShell and the case for agent controls outside the harness
NVIDIA's open-source OpenShell enforces agent policy outside the model and harness. What version 0.1.0 does, what is only a reference design, and what to copy.
5 min read
Copilot CLI now finds local Ollama models: what stays on the machine
GitHub Copilot CLI can discover models from a local Ollama instance. A local model is not offline mode, and telemetry and remote providers still need settings.
Claude Sonnet 5.5: faster mid-tier coding without a list-price rise
Sonnet 5.5 kept Sonnet 5's $2 and $10 token prices, then had its cache-read price halved. What that does to coding costs, and where Opus 5.5 still leads.
5 min read
Using the OWASP Top 10 for Agentic Applications as an engineering checklist
How to turn the ten OWASP agentic AI risks, from goal hijack to rogue agents, into concrete backlog items for a coding-agent rollout this quarter.
6 min read
Codex made GPT-6.1 Sol the default: what teams should change
Codex 0.161.0 switched its default model to GPT-6.1 Sol and made Daybreak cyber routing opt-in. What changed, what it costs, and what to pin in CI and config.
5 min read
Browse by tag
- #Security (55)
- #Agents (41)
- #AI coding tools (38)
- #LLM costs (23)
- #MCP (16)
- #Evaluation (14)
- #Observability (12)
- #Compliance (11)
- #Enterprise (9)
- #Platform engineering (9)
- #Data privacy (8)
- #DevOps (7)
- #Model routing (7)
- #Open-weight models (7)
- #Research (7)
- #Tutorials (6)
- #Code review (4)
- #Developer productivity (4)
- #Guardrails (4)
- #Networking (4)
- #OpenTelemetry (4)
- #Budgets (3)
- #Prompt engineering (3)
- #Self-hosting (3)
- #MCP gateway (2)
- #Release notes (2)
- #Skills (1)
- #Testing (1)