The portability sprint — April 7-8

Copilot CLI BYOK + local models + air-gapped

GitHub Copilot CLI now supports bring-your-own-key (Azure OpenAI, Anthropic, OpenAI-compatible), local models (Ollama, vLLM, Foundry Local), and fully air-gapped operation (COPILOT_OFFLINE=true, no GitHub sign-in). Requirements: tool calling, streaming, 128K recommended. The agent that was least portable is now most portable.

Dependabot → AI agent assignment

Assign Dependabot security alerts to Copilot, Claude, or Codex agents for remediation. Agents analyze advisories, open draft PRs, attempt test resolution. Multiple vendors assignable to same alert. Agents as first-class supply chain participants.

Google Scion

Open-source multi-agent orchestration testbed (GoogleCloudPlatform/scion). Runs Claude Code, Gemini CLI, Codex as isolated concurrent processes. Container isolation, git worktrees, per-agent credentials. Google building vendor-agnostic.

Pinterest MCP at production scale

66K invocations/month, 844 active users, ~7,000 hours/month saved. Multiple domain-specific MCP servers + central registry + unified deployment pipeline. Most detailed enterprise MCP case study to date.

SurePath AI MCP Policy Controls

Real-time policy engine intercepting MCP payloads. Allow/block per-tool. Supply chain threat detection for unseen MCP tools. First MCP-specific governance product.

Codex model picker curation

Dropped gpt-5.2-codex, gpt-5.1-codex-mini/max/standard, gpt-5.1, gpt-5 from picker. Simplified to gpt-5.4, gpt-5.4-mini, gpt-5.3-codex, gpt-5.2.

Cursor v3.0.13

Patch, no public notes. Stability/bugfix post-launch.