The evolution of multi-agent software engineering is moving fast. With the release of GitHub Agentic Workflows (gh-aw) for Squad, developers can now trigger multi-agent orchestration directly inside GitHub issues and pull requests using intuitive slash commands.
This creates a seamless developer experience, but enterprise environments often introduce additional operational requirements: strict compute isolation, customized governance policies, zero-trust network boundaries, and centralized telemetry across long-running autonomous jobs.
Rather than treating GitHub-native execution and Azure enterprise compute as competing models, we can combine them into two complementary approaches for scaling AI agent teams.
The Dual Architectural Pattern#
When a GitHub Event or Comment occurs, your architecture can route the workload depending on the required operational scope:
[ GitHub Event / Comment ]
|
+---------------------+---------------------+
| |
v v
[ squad-on-aca + hub ] [ GitHub Agentic Workflow ]
(Azure Cloud Serverless) (gh-aw)
------------------------ ---------------------------
• Event Trigger (Actions) • Slash Commands (/squad)
• ACA Jobs / Sandboxes • GitHub Actions Runner
• Microsoft Agent FW (MAF) • Squad CLI & Copilot SDK
• .NET Aspire Telemetry • Lockfile Execution
• Centralized Squad Hub • Connect & Adopt ModesKey Architectural Insight: Use
gh-awfor developer-facing interactive flows directly in standard pull requests, and offload heavy, long-running, or highly regulated execution tosquad-on-aca.
Architectural Comparison Matrix#
| Feature / Capability | GitHub Agentic Workflows (gh-aw) | Azure Serverless (squad-on-aca + Hub) |
|---|---|---|
| Primary Focus | Developer UX & Repository Velocity | Enterprise Governance & Heavy Compute |
| Execution Context | GitHub Actions Runner | ACA Serverless Jobs & ACA Sandboxes |
| Interaction Model | Native Slash Commands (e.g., /squad) | Event-driven offload via Webhooks/Actions |
| Telemetry & Tracing | GitHub Action Workflow Logs | .NET Aspire & Azure Monitor OpenTelemetry |
| Security Isolation | Standard Runner Container Boundaries | Micro-VM / VNet Isolated Sandboxes |
Approach 1: GitHub Agentic Workflows (gh-aw)#
The gh-aw model focuses on maximizing developer velocity directly within the repository lifecycle.
Key characteristics include:
- Frictionless Developer Interaction: Developers interact with agents naturally via slash commands (such as
/squad) inside comments on issues and pull requests. - GitHub Actions Runners: Agent tasks execute inside standard or self-hosted GitHub Actions runners using lockfile execution to guarantee deterministic runs.
- Squad CLI and Copilot SDK: Agents leverage the local repository context, CLI utilities, and Copilot SDK bindings to inspect code, draft pull requests, and review changes.
- Connect and Adopt Modes: Teams can incrementally adopt agentic automation without refactoring existing repository workflows.
Approach 2: squad-on-aca and Squad Hub#
To complement the GitHub-native developer experience, squad-on-aca and squad-hub shift heavy or sensitive compute workloads directly onto Azure Cloud Serverless.
Key characteristics include:
- Azure-Native Enterprise Compute: Workloads execute inside Azure Container Apps (ACA) Jobs and isolated ACA Sandboxes, keeping compute charges, execution quotas, and enterprise boundaries strictly managed on Azure.
- Microsoft Agent Framework (MAF): Agents are orchestrated using robust framework primitives designed for complex multi-agent orchestration, state persistence, and structured tool handling.
- .NET Aspire Telemetry: Comprehensive distributed telemetry and OpenTelemetry tracing across all agent interactions, tool calls, and model tokens.
- Centralized Squad Hub Control Plane: A centralized management system to monitor agent status, track active coding sessions, and manage cross-device agent orchestration across the organization.
Better Together: Strategic Workload Routing#
By combining these two patterns, software engineering teams do not have to compromise between developer convenience and enterprise cloud control:
- Quick Tasks and PR Reviews: Lightweight interactions, quick code fixes, and pull request reviews execute via
gh-awdirectly on GitHub Actions runners. - Heavy Computing and Regulated Execution: Complex multi-step agent workflows, long-running batch transformations, or tasks requiring access to internal corporate data endpoints offload trigger events from GitHub to
squad-on-aca.
This hybrid model gives development teams the delight of slash-command AI automation while providing platform engineering teams full governance, telemetry, and compute isolation on Azure.

