What changed
Microsoft Conductor 0.1.44 adds execution profiles for isolated Docker or Azure Container Apps sessions, remote runners across Copilot, OpenAI and Claude providers, per-call secret overlays for stdio MCP tools, monitored interruption and safer retained-workspace resume checks.
Why it matters
Agent orchestration is moving isolation, credential delivery, cancellation and workspace recovery into explicit runtime contracts instead of leaving them to prompt conventions or ad hoc wrappers.
What to do
Pin 0.1.44 in a disposable project; run one agent in Docker, inject a scoped MCP secret, interrupt it during a tool call and attempt a retained-workspace resume after removing the staging marker. Inspect the runner environment, logs and files before promotion.
Caveat
The behavior is documented by the maintainer, not independently validated containment evidence. Docker or Azure configuration, host-resolved credentials and third-party provider SDKs remain part of the trust boundary.