Temporary rollback: build identities can access Advanced Security: read alerts again

This post announces a temporary rollback of a security restriction that prevented build service identities (e.g., 'Project Collection Build Service') from accessing Advanced Security APIs. The restriction is being re-enforced on May 15, 2026. It recommends migrating automation to a service principal with 'Advanced Security: Read alerts' permissions. It also announces upcoming 'status checks' in Sprint 272, which will provide a native way to gate on security posture at pull request time based on alert presence.