Data & AI watch, week of 2 to 8 November 2026

Workspace outbound access protection (OAP) used to require a protected report to use a semantic model in the same workspace. In preview, a workspace admin can now allow a destination workspace through an exception rule: in the outbound networking settings, a cloud connection rule of kind Power BI Semantic Model pointing to the workspace that hosts the model. Blocking remains the default, the report binding stays the same, and the model remains subject to its own connection rules. Allow about fifteen minutes for a rule change to take effect.

The Monitor in warehouse action in the Fabric Capacity Metrics app is now generally available. From a timepoint detail, it opens the monitor of the relevant warehouse on the right time window, with the history of the queries that ran. Microsoft suggests sorting by CPU time, then reading data scanned, result cache use and query text together. You need access to the metrics app and the Admin role on the warehouse workspace.

The Fabric Actions activity calls Fabric REST API operations from a pipeline, with connection and authentication handled for you: run a notebook, manage a OneLake shortcut or refresh a semantic model once the data is ready. Operations can now be found in a picker, without knowing the endpoint. The Business Actions activity gains 25 third-party connectors: SMS, document generation, e-signature, CRM, project management.

The Fabric warehouse and the lakehouse SQL analytics endpoint gain five scalar functions: REGEXP_LIKE, REGEXP_REPLACE, REGEXP_SUBSTR, REGEXP_INSTR and REGEXP_COUNT. They extract a value from free text (an order number in an email subject), check a format before loading, standardise text or mask sensitive data, directly in the query.

The admin connection APIs let a Fabric administrator give the Owner role on a connection to a successor, another administrator or a service principal, for instance after someone leaves. The tenant-wide inventory shows, for each connection, its endpoint, privacy level, authentication type, and when it was last linked and its credentials last used. Microsoft points out that reassignment does not carry over OAuth credentials: the new owner signs in again and validates the dependent workloads. A read-only inventory app is published as a sample.

IQ Share shares a lakehouse, a warehouse or a mirrored item with recipients in other Fabric tenants. The data stays with the producer, the recipient reaches it through a shortcut in their own workspace, and new tables appear with no extra pipeline. Markdown files can travel with a lakehouse to carry definitions and usage rules. The producer tracks acceptances, revokes access or sets an expiry date from the OneLake catalog.

The amended S-1 filed with the SEC on 2 November reports revenue of 17.0 billion dollars for the third quarter of 2026, up 1,127% year on year, with about 5,300 employees. It also puts purchase and lease commitments at 895.4 billion dollars, almost all for compute and infrastructure, of which 447.5 billion are expected before the end of 2030. The IPO price range is still to be set. We covered the initial filing in the 2 November watch.

OpenAI is opening GPT-6 Cyber in the API and Codex to a restricted group of customers in its Daybreak Red programme, then to the whole programme over the following weeks. The company says GPT-6 found at least 81 new vulnerabilities in Firefox and produced exploits for 948 Linux kernel flaws, all reported and patched. The added safeguards cover identity checks, monitoring of high-risk requests and staying within the authorised scope. These results are vendor figures.

Mistral is extending Studio, its enterprise platform, with managed agents, hosted apps, workflows, enterprise context, and agent observability and evaluation. Both the models and the platform deploy in Mistral's cloud, in your own private cloud or on premises. An MCP server lets developers build with the coding agent of their choice and deploy with a single command. On 6 November, Le Monde Informatique reported the acquisition of SkipLabs, a specialist in the reliability of generated code, which forms a new "Language" team.

Since 3 November, text produced by Claude Mythos 5, Claude Opus 4.7 and Claude Sonnet 4.6 carries Anthropic's text watermark on the platforms listed in its documentation. On Sonnet 4.6, a request that changes temperature, top_p or top_k may come without it. On 5 November, the Claude Console opened an organisation-level IP allowlist in beta, with up to 1,000 addresses or ranges, which limits where a leaked API key can be used.

Google is removing the Gemini Code Assist entitlement bundled with existing Gemini Enterprise Standard and Plus subscriptions on 31 March 2027; new subscriptions have come without it since 9 October. Google points developers to Antigravity, included in Gemini Enterprise editions. Another change: Gemini Notebook Enterprise addresses are moving, with a new host name from 16 November. Old links redirect, but a firewall or proxy that filters by address needs updating.