Home/Architecture/Die Seekarte

The chart — where the currents are carrying the workplace

Seven currents. Three crossing points. A genuine change of paradigm on the horizon. How agentic AI, Cloud PCs, sovereignty and Zero Trust are reordering the next generation of the workplace — charted and annotated from an architectural perspective.

Perspective EUC · DaaS · agentic AI · sovereignty
Horizon 2026 – 2030
Format Knowledge article · Workplace Decoded
Reading time about 15 minutes
Why a chart?

Developments never run in isolation — they cross.

Set individual products against each other and you see developments as separate strands. In fact they behave like currents: they run parallel for stretches, cross at certain points, and it is exactly there that the architecturally relevant scenarios form. A chart makes that visible — including the shallows that never appear on a product list.

„Compare only individual products — AVD against Citrix, Copilot against Gemini, Intune against Workspace ONE — and you miss the crossings where the actual future takes shape.“ Workplace Decoded

Out of daily work with endpoint, DaaS and AI architectures, five structural tensions crystallise from which the developments of the coming years emerge. Individually they are not new — their simultaneity is.

01
Fragmented devices
Managed PC, BYOD, Cloud PC, kiosk, NPU laptop — all at once, within one organisation.
02
AI without governance
Copilot is rolled out, the EU AI Act is in force — the processes in between are missing.
03
Sovereignty vs innovation
Dependence on hyperscalers is both a risk and an enabler — a balance is needed.
04
Zero Trust in hybrid working
No perimeter left — identity becomes the new perimeter, everywhere.
05
A thicket of compliance
TISAX, NIS2, the EU AI Act, DORA and ISO 27001 increasingly interlock.
The chart

The chart for the Modern Workplace

Seven currents, each its own axis of development. Five stages from the classic world to autonomous operation. Three marked crossing points where the most interesting scenarios form.

STAGE 1 STAGE 2 STAGE 3 STAGE 4 STAGE 5 Classic Modernised Cloud-native AI-augmented Autonomous HARBOUR · TODAY HORIZON 2030 The fleet ENDPOINT Physical PC Managed Cloud PC NPU device Context-free The new current AI Automation Copilot-Assist Copilot-Agents Autonomous agents Multi-Agent The main route DELIVERY VDI On-Prem DaaS App-Only Session-based Session-less The pilotage IDENTITY AD Domain Hybrid Join Entra Join Passwordless Verifiable IDs The beacons SECURITY Perimeter Zero Trust CAE AI-Detection Self-Healing The coastal waters SOVEREIGNTY Cloud-First EU-Boundary Sovereign Cloud Confidential Digital Sov. The law of the sea GOVERNANCE Manual Policy-as-Code Guardrails AI-Governance Autonomous A B C A Agents in the workplace Fleet × current × main route B A sovereign AI workplace Current × coastal waters × law of the sea C Session-less Work Change of paradigm · stage 5

The chart for the modern workplace — seven currents from the harbour to the 2030 horizon, in five stages. Each current has its own symbol and its own line pattern. The three crossing points A, B and C are explained in detail below.

Illustration: own graphic, created with AI assistance

The seven currents

Seven currents, seven axes of development

Each current describes its own development in maturity. No organisation moves at the same speed on all seven — nor does it need to. But knowing where you stand on each axis lets you sharpen your course.

The fleet

Endpoint · what work is done on

The device as the carrier of work is changing shape. From the permanently assigned PC in the office through the managed device with MDM to the browser-based Cloud PC and the NPU laptop with local AI acceleration. At the end stands the context-free device — any available display becomes the workplace.

Physical PC Managed Cloud PC NPU device Context-free

The new current

AI · from assistance to autonomy

The fastest-moving axis — and the only one that catches up with you even if you do nothing. From classic automation through Copilot assistance (the human asks, the AI answers) to Copilot agents (the AI performs predefined tasks) and on to autonomous agents and multi-agent systems that collaborate on their own.

Automation Copilot-Assist Copilot-Agents Autonomous Multi-Agent

The main route

Delivery · how work is delivered

The virtual desktop is moving away from the monolithic session towards more granular models: first app-only delivery, then short-lived session-based containers, finally session-less — the task, not the desktop, becomes the carrier of work. A Copilot agent that produces a report without a persistent session is already a harbinger.

VDI DaaS App-Only Session-based Session-less

The pilotage

Identity · who comes in, and how

Identity becomes the new perimeter — nobody enters unchecked. From classic AD through hybrid join and Entra join, the anchor moves into the cloud. Passwordless authentication is best practice today; verifiable credentials are the next chapter, with consequences reaching well beyond the workplace.

AD Hybrid Join Entra Join Passwordless Verifiable IDs

The beacons

Security · what you navigate by

From the perimeter model through Zero Trust and continuous access evaluation to AI-based anomaly detection and finally to autonomous, self-healing response. Operations teams shift their focus from working through alerts to curating models.

Perimeter Zero Trust CAE AI-Detection Self-Healing

The coastal waters

Sovereignty · who owns the data

The politically driven axis — territorial waters with rules of their own. From cloud-first strategies through the EU Data Boundary to sovereign cloud offerings, confidential computing enclaves and finally a broader understanding of digital sovereignty that goes beyond where data is held.

Cloud-First EU-Boundary Sovereign Cloud Confidential Digital Sov.

The law of the sea

Governance · what applies whatever the course

Governance moves from manual configuration work to policy as code, then to guardrails within which users can move safely, on to AI governance frameworks (Purview, audit layers compliant with the EU AI Act) and finally to largely autonomous governance, in which rules are interpreted and adjusted by models.

Manual Policy-as-Code Guardrails AI-Governance Autonomous
The crossing points

Where the channels cross, the scenarios form

Individual currents matter, but the defining scenarios arise where several converge. Three of these crossing points look particularly consequential from where we stand today.

A Fleet × current × main route

Agents in the workplace

At stage 4 three currents converge and form a new scenario: the virtual desktop is no longer merely used — it increasingly becomes a place where autonomous AI works. Copilot agents run inside the session, open applications, extract data and consolidate reports — while the human works alongside them or is absent. The device remains, but its user is increasingly hybrid: part human, part agent.

Fleet · NPU device
Current · autonomous agents
Main route · session-based
B Current × coastal waters × law of the sea

A sovereign AI workplace

The second defining crossing point arises where AI meets European reality. The Copilot experience, yes — but on a sovereign cloud substrate, with confidential computing enclaves, auditability compliant with the EU AI Act, and a policy layer that knows which data may go into which AI. That is not a utopia but the actual requirement placed on architectures in regulated industries — automotive, finance, healthcare, the public sector — over the next three to five years.

Current · autonomous agents
Coastal waters · confidential
Law of the sea · AI governance
The real change of paradigm

Session-less work — when the desktop disappears, without anyone abolishing it.

Since the early 1980s, knowledge work has organised itself around a construct called the session — a persistent context in which applications run, data is held and people decide. Whether a physical desktop, VDI or DaaS: the session was always the place where work happened.

Agentic AI is where the tectonic shift begins. When an autonomous agent produces a report, it needs no eight-hour session with a cache and a profile — it needs 90 seconds of compute, three API calls and brief access to classified data. For that task, the session as the carrier of work is simply oversized.

This is the point at which the established delivery models do not become wrong — but their significance shifts. They remain relevant for longer, human-driven interactions. For agent-driven micro-tasks, session-less compute fabrics arise alongside them, orchestrated, created and dissolved again within minutes.

For architects that means: the question of the right VDI platform remains important — but it is no longer the only one. Alongside it comes the question of the compute fabric for agents. And because both worlds will exist side by side, the decisive architectural skill will be holding both under one governance.

The paradigm so far
The session as the carrier of work
One human, one persistent session, one desktop state. Cache, profile, open applications. Work happens inside the session.
The new paradigm
The task as the carrier of work
One agent, one short-lived compute instance, no persistent artefacts. Authorisation by credential, governance by policy. Work happens at a point in time and then disappears.
What does this mean for today?

Four questions IT architects should be asking now

A chart is not an end in itself. It becomes useful when it sharpens the right questions for today — not when it turns out to have been right in five years.

01

Where do we stand on each of the seven currents?

An honest self-assessment. If your fleet is still at „managed“ while Copilot is already rolled out on the new current, you have a break in maturity that creates governance problems. The chart provides the diagnostic grid for it.

02

Which two currents do we want to couple first?

Rather than pushing seven axes forward in parallel, it helps to steer deliberately for the crossing points — pilotage and beacons, say (a Zero Trust session), or the new current and the law of the sea (a compliant Copilot). Fewer building sites, more coherence.

03

How do we prepare governance for session-less working?

Even if session-less work is still three to five years away, the preparation happens today. Data classification, policy as code, clear data contracts between human and agent. Lay those foundations now and there will be less friction later. Related: Compliance Mapping.

04

Will our platform strategy hold the course?

A roadmap that follows a single vendor usually covers the coastal waters only as far as stage 2 or 3, and often does not see the new current at all. The chart makes visible where additions across vendors become structurally necessary. Related: DaaS Maps.

Continue the discussion

This article is part of Workplace Decoded.

I share analyses, frameworks and comparisons on the digital workplace — vendor-neutral and evidence-based. If you would like to comment on the chart, add to it or enrich it with your own experience, LinkedIn is the quickest route to a conversation.

Connect on LinkedIn → All architecture articles

Or by email: kontakt@sofianesalmi.com

Schreibe einen Kommentar

Deine E-Mail-Adresse wird nicht veröffentlicht. Erforderliche Felder sind mit * markiert