Microsoft Entra Agent ID reached general availability, and in Microsoft Foundry the agent identity is provisioned for you. Understand blueprints, the shared project identity and the RBAC that does not carry over on publish, why a sponsor is required at creation, how leaver workflows transfer sponsorship to prevent orphaned agents, and why the token subject decides where a Conditional Access policy actually lands.
A private endpoint controls ingress; it authenticates nobody and does not decide where the agent writes afterwards. The three boundaries of an AI workload — entrance, identity, and exit —, the three DNS zones Foundry requires, the roles that were renamed, and the egress control almost every project leaves open.
Prompt caching solves reuse, but it does not decide when to run, how to buy capacity, or which model should answer. A practical framework for combining Batch, PTU, pay-as-you-go, and Model Router around cost per approved task.
AI adoption stopped being a technology problem and became an operations and accountability problem. An executive guide to governance, the real dangers of AI, and the shift from application developer to AI engineer.
The memory types of an agent (short/long-term, episodic, semantic, procedural) and how to implement the retrieve/write-back loop in the Microsoft Agent Framework.