Network Isolation

Constrains inbound and outbound Foundry traffic so model, agent, tool, storage, and retrieval interactions avoid public exposure. Combines Private Link and public-network-access controls for inbound with a Microsoft-managed virtual network and managed private endpoints for agent outbound traffic, reducing data exfiltration risk.