The new SQL/PGQ path is useful for relationship-heavy questions, but Oracle’s object-list rule creates a hard architecture boundary for mixed relational-and-graph assistants.

Microsoft’s preview Fabric Actions activity can feed REST responses into later pipeline logic. Its documented operating rule is straightforward: review dynamic identifiers before execution, then verify the returned value before the workflow continues.

Domo’s data team adds shared folder, naming, test and deployment conventions above permission-aware MCP tools—separating access control from maintainability.

Databricks’ five-signal scorecard is a better starting point for measuring whether natural-language analytics changes decisions without multiplying metric drift.

AI.IF can route most rows through a distilled local model, but that default-looking optimization changes scale requirements, error handling and endpoint choices.

OpenSearch 3.7 puts prompts, tool calls, span links and logs in one analytical store. AWS’s own engine-selection guidance draws a firm boundary around where it fits.

The same question-and-query pair can act as a retrieved hint, a composable blueprint or a governed semantic-model asset. Treating those roles as interchangeable is a migration trap.

Feature Views reduce training-serving skew by reusing definitions across historical and online paths. They do not make asynchronous feature delivery disappear.

The Slack and Teams previews evaluate questions with the asker’s Unity Catalog rights, then may show the resulting answer to people who could not query the source themselves.

The proposal separates continuously maintained business state from transaction authority. That distinction matters more than the new category name.

A two-tool GraphRAG design outscored a seven-tool knowledge-graph agent in Snowflake’s controlled biomedical test. The useful lesson is architectural, not a general leaderboard claim.

Fabric can now share an entire lakehouse or warehouse without copying it. The preview’s operating boundary is equally important: source OneLake rules do not follow the data, and agents need an extra shortcut layer.

The launch separates a fast decision model from a general-purpose LLM, but operators should not treat the cited 26 ms routing figure as a measured Koa production SLA.

Version 5.3.9 beta 2 adds checkpoints, rejected-row exports and clearer counters. The useful change is not “retry”; it is making partial success inspectable.

The preview replaces custom MCP plumbing with first-party live-query connectors. Its convenience creates a deliberate boundary: broad access follows the user, while deterministic scope requires a curated data agent.

The same Claude model improved sharply with governed context, but the vendor’s filtered four-domain BIRD experiment should guide architecture decisions, not cross-system rankings.

TSIQ’s two-plane design is a useful production pattern: let models interpret requests, but keep market data, calculations, permissions and audit trails deterministic.

MSK Replicator now spans both AWS GovCloud regions and carries offsets, ACLs and topic settings. Teams still need to design around asynchronous replication and a documented new-topic window.

The headline latency joins generally available ingestion and serving to a transformation layer that remains in private preview. Teams should qualify each stage separately.

Tableau Knowledge can ground external agents in governed analytics assets, yet its deployment, licensing and connector boundaries matter before teams treat it as a universal semantic layer.

Databricks’ new OpenSharing walkthrough makes one operational boundary explicit: incremental append processing, row-level CDC and live querying are different contracts.

For schema-heavy data agents, the headline context window is only part of the deployment contract: explicit caching skips Converse, reasoning defaults to maximum, and every supported route is cross-Region.

The new limit is opt-in, provisioned clusters must reboot, and VARCHAR(MAX) still means two different things depending on context.

Agent Registry is now in GovCloud US-West. The useful boundary is also the easy one to miss: catalog approval governs discoverability, while execution still belongs to separate runtime, gateway and identity controls.

Unity Gateway centralizes model access, budgets and traces; public-sector teams still need a route-by-route residency inventory.

Cloud 26.10 makes custom Spotter Analysts generally available while adding user- and group-level connector sharing. Those controls solve different problems, and teams should test both.

The new API compresses forecasting, prediction and natural-language filtering into familiar pandas calls. Teams still need to govern where the data goes, which model runs and what the result means.

Source-vended credentials remove the need for a broad AWS role over remote storage. They also make operators reason about revocation, query-time refresh and layered grants across two systems.

IBM’s Think 2026 data recap makes a useful operational point: freshness, context and governance are separate controls, and autonomous action needs all three.

The preview combines plans, schema and runtime evidence with an LLM, but it does not turn recommendations into verified changes.

Microsoft’s preview exposes timeout, retry and polling controls. Those controls improve delivery; they do not prove an external write is idempotent.

The new BigQuery endpoint covers agent resources at rest and jurisdictional model processing in use. It does not relocate datasets or extend the same commitment to Looker.

Google’s open-source agent analytics stack turns requests, tool calls and errors into queryable data. Teams still have to decide what success means—and who may inspect the logs.

The Dedicated Exadata feature dynamically chooses specialist workers, but every handoff is sequential and each worker receives only the context the supervisor packages.

Oracle, Databricks and Snowflake expose three different context mechanisms. Treating them as substitutes leaves predictable gaps in names, joins and answer patterns.

NVIDIA cut a protected 1.2.0 branch and synchronized its app, APIs, MCP package and Helm images. Operators still need to verify the artifact they deploy.

OpenSharing, Clean Rooms and Marketplace can all move data and AI assets, but they expose very different things to very different counterparties.

The private-region launch moves compute, storage and encryption keys into a customer account while leaving identity, billing, telemetry and optional AI processing across the control-plane boundary.

Google’s preview turns semantic synthesis into a recursive SQL aggregate. The operational limits, silent skips and token multiplication matter more than the one-line demo.

Assistive Authoring separates probabilistic language work from routing, identity, permissions and execution. That boundary is the useful production pattern.

A new production guide turns agent reliability into concrete limits: portable state, identity-scoped caches, a 15-second shutdown window and explicit database connection arithmetic.

OneLake’s Iceberg REST Catalog endpoint gives external engines a managed write path. Operators still need to separate temporary authorization from commit validity.

SQLcl 26.3.1 repairs update, multi-tag and database-level conflict behavior. The practical lesson is that generated metadata needs a review and maintenance loop—not a one-time enrichment pass.

A new seven-check workflow turns conversational analytics from a confidence exercise into an auditable chain of evidence.

The new GA drill-down and read-only operations skill shorten incident triage. They do not make Capacity Units and query CPU interchangeable, and they do not justify automatic tuning changes.

The DataOS assistant traces definitions, filters and sources while enforcing access at query time. That is a stronger architecture than prompt-only guardrails, but buyers still need measured failure evidence.

The new Debezium-to-Zerobus route keeps capture inside private networks and lands changes directly in Unity Catalog. Operators still own deduplication, ordering and replay tests.

Tested Python functions can give a small team one source of truth. Markdown can give agents context. Neither automatically governs every query that an agent writes.

S3 Tables now handles planning, copying and incremental sync. Its companion agent skill correctly treats approval, validation and completion as separate control points.

The Public Preview can remove joins and DISTINCT work, but it does not enforce uniqueness on writes. Teams must validate and continuously maintain every guarantee the optimizer is allowed to trust.