Chapter 2 of 6 · Architecture

Governed Microsoft Foundry agent baseline

Governed foundation 2.5 hours in a non-production POC

Chapter 2 of 6

Architecture at a glance#

A caller reaches the Entra-authorized stable Responses endpoint. Foundry routes the request to the pinned prompt-agent version. That version can call the single GET operation in its OpenAPI tool. The RAI policy handles model input and output, while Foundry sends server-side traces to the connected Application Insights resource.

A versioned Foundry agent uses its Entra Agent Identity at the endpoint and project managed identity for one read-only API.

The deployment scripts read agent.json, instructions.md, and tool-manifest.json, create an immutable version, and route all endpoint traffic to it. The control boundary ends at the direct read API.

Design choices and tradeoffs#

DecisionChosen approachTradeoff
Runtime and releasePersistent prompt agent with an immutable version and pinned endpointEvery configuration change creates a version
IdentitiesAgent identity at the endpoint; project managed identity for the OpenAPI callThe API sees the project identity, not the user or agent
ToolAttach one GET-only OpenAPI definition directlyReuse and centralized tool lifecycle stay outside this baseline
RoutingSend 100% of traffic to the new versionPromotion is an explicit deployment step

Architecture guidance#

Session 04

Governed Microsoft Foundry agent baseline slide deck