Azure investigations
Azure projects are a different workflow from code. They run read-only az investigations against your subscription and save the findings to the project's docs. No repo, no git worktree, no changes to your cloud.
Setup
- Install the
azCLI and sign in withaz login. - Create an Azure project in the Projects view — it needs no repository path.
The Azure panel
The Azure panel is the guarded, read-only az surface:
- Auth status — confirms you're signed in.
- Quick presets — common queries (list resources, check network security groups, review permissions, and so on).
- Free-form command box — run a custom
azcommand. - Results — structured output plus the raw JSON.
- Summary — an AI-generated digest of what the results mean.
- Save to docs — persist the findings into the project docs.
Read-only by design
The panel is hard-guarded to read-only az commands. It can't create, update or delete anything in Azure — investigations are safe to run against production. Write operations are simply not available.
From findings to action
Saved findings become project docs that agents can reference. A typical flow:
- Investigate infrastructure with presets or custom queries.
- Save to docs the relevant findings.
- Toggle Include for AI so future agents use them as context.
Import from Azure DevOps
Separately, you can connect Azure DevOps in Settings to import work items as tasks — see Projects. This is distinct from the read-only az investigation flow above.