---
id: feature/573336
type: feature
title: Audit AL app accessibility and debugging boundaries
summary: 'Development: Audit AL app accessibility and debugging boundaries. Generally available, GA 2026-10 (Microsoft 365 roadmap). "Build and query static AL call graphs to trace public-to-internal calls, debugging boundaries, elevated code, and cross-app relationships, with visual exports. Business value: Extension developers can understand how public APIs expose internal implementation details and where execution crosses debugging boundaries.'
tier: official
language: en
system: development
tags:
  - development
review:
  state: derived
  by: null
  at: null
  flags: []
generated:
  at: "2026-10-07T23:41:05.192Z"
  pipeline: 0.2.0
  prompts: {}
  input_hash: bd9f51e402d1451f313677b96bb93a40e288816de1cc7f4136760917eacaffa9
evidence:
  - kind: roadmap
    url: https://www.microsoft.com/microsoft-365/roadmap?id=573336
    title: Microsoft 365 roadmap 573336
    date: "2026-09-30"
    commit: null
    t: null
    quote: null
  - kind: video
    url: https://www.youtube.com/watch?v=D_Lur52IrIg&t=1547s
    title: "What's new in AL and Tools (2026 release wave 2): Static call graph analysis"
    date: null
    commit: null
    t: 1547
    quote: null
  - kind: video
    url: https://www.youtube.com/watch?v=i0gBrA1tx50&t=5s
    title: "What’s new: ALGraph (2026 release wave 2): AL Graph"
    date: null
    commit: null
    t: 5
    quote: null
  - kind: video
    url: https://www.youtube.com/watch?v=i0gBrA1tx50&t=98s
    title: "What’s new: ALGraph (2026 release wave 2): AL Graph query language"
    date: null
    commit: null
    t: 98
    quote: null
  - kind: video
    url: https://www.youtube.com/watch?v=i0gBrA1tx50&t=116s
    title: "What’s new: ALGraph (2026 release wave 2): AL Graph DGML export"
    date: null
    commit: null
    t: 116
    quote: null
  - kind: video
    url: https://www.youtube.com/watch?v=i0gBrA1tx50&t=116s
    title: "What’s new: ALGraph (2026 release wave 2): AL Graph SARIF export"
    date: null
    commit: null
    t: 116
    quote: null
  - kind: video
    url: https://www.youtube.com/watch?v=i0gBrA1tx50&t=139s
    title: "What’s new: ALGraph (2026 release wave 2): AL Graph meta model extraction"
    date: null
    commit: null
    t: 139
    quote: null
  - kind: video
    url: https://www.youtube.com/watch?v=i0gBrA1tx50&t=184s
    title: "What’s new: ALGraph (2026 release wave 2): HTTP client caller auditing"
    date: null
    commit: null
    t: 184
    quote: null
  - kind: video
    url: https://www.youtube.com/watch?v=i0gBrA1tx50&t=253s
    title: "What’s new: ALGraph (2026 release wave 2): Non-debuggable to debuggable boundary audit"
    date: null
    commit: null
    t: 253
    quote: null
links:
  learn: []
  objects: []
  features: []
  topics: []
  localizations: []
  videos:
    - video/D_Lur52IrIg
    - video/i0gBrA1tx50
  posts: []
  guidelines: []
roadmap_id: "573336"
wave: 2026 release wave 2
status: ga
roadmap_status: Launched
release_phase: General Availability
ga_date: 2026-10
preview_date: null
area: Development
whatsnew_url: null
localizations: []
objects_touched: []
---

# Audit AL app accessibility and debugging boundaries

> Development: Audit AL app accessibility and debugging boundaries. Generally available, GA 2026-10 (Microsoft 365 roadmap). "Build and query static AL call graphs to trace public-to-internal calls, debugging boundaries, elevated code, and cross-app relationships, with visual exports. Business value: Extension developers can understand how public APIs expose internal implementation details and where execution crosses debugging boundaries.

[Microsoft 365 roadmap 573336](https://www.microsoft.com/microsoft-365/roadmap?id=573336) · Development · generally available · roadmap status "Launched", phase General Availability

## What Microsoft says

"Build and query static AL call graphs to trace public-to-internal calls, debugging boundaries, elevated code, and cross-app relationships, with visual exports. Business value: Extension developers can understand how public APIs expose internal implementation details and where execution crosses debugging boundaries. This visibility helps teams review extension architecture, reduce unintended API exposure, and identify cases where sensitive values could become inspectable in the debugger. The analysis can run across an app and its dependencies, making it useful for architecture reviews, security assessments, and automated governance in larger extension portfolios."

## Dates

- General availability: October CY2026 (2026 release wave 2)
- Public preview: not given
- On the roadmap since 2026-09-30, last changed 2026-09-30

## Covered by

Matched by Haiku among videos and Learn pages in the same galaxy system, checked against the roadmap ids and the evidence text. Every link below was reviewed by Opus.

### Videos

- [What's new in AL and Tools (2026 release wave 2)](../videos/D_Lur52IrIg.md): Static call graph analysis at [25:47](https://www.youtube.com/watch?v=D_Lur52IrIg&t=1547s)
- [What’s new: ALGraph (2026 release wave 2)](../videos/i0gBrA1tx50.md): AL Graph at [0:05](https://www.youtube.com/watch?v=i0gBrA1tx50&t=5s); AL Graph query language at [1:38](https://www.youtube.com/watch?v=i0gBrA1tx50&t=98s); AL Graph DGML export at [1:56](https://www.youtube.com/watch?v=i0gBrA1tx50&t=116s); AL Graph SARIF export at [1:56](https://www.youtube.com/watch?v=i0gBrA1tx50&t=116s); AL Graph meta model extraction at [2:19](https://www.youtube.com/watch?v=i0gBrA1tx50&t=139s); HTTP client caller auditing at [3:04](https://www.youtube.com/watch?v=i0gBrA1tx50&t=184s); Non-debuggable to debuggable boundary audit at [4:13](https://www.youtube.com/watch?v=i0gBrA1tx50&t=253s)

Source: Microsoft 365 roadmap. Status words follow the roadmap.