Azure AI Foundry

Connect Azure AI Foundry to OSuite and get your first governed action into /decisions in under 20 minutes.

Instance URL detected: https://studio.osuite.ai

Governance context

Runtime class

Cloud Agent Platform

A hosted builder or cloud platform where governance depth depends on customer-owned control points around execution.

Recommended surfaces

Control Plane

Run policy, approvals, replay, and evidence management as the operator system of record.

Evidence Import Surface

Import actions, traces, and logs when the external runtime cannot be governed directly.

Typical governance range

Advisory Governance -> Approval-Orchestrated Governance -> Runtime-Enforced Governance

Self-host and future SaaS are deployment model choices for the OSuite control plane. They do not determine governance level by themselves.

Treat Foundry as a managed agent platform

Foundry owns the hosted agent harness. OSuite should not pretend it is an inline runtime.

Use bridge mode with Trust Boundary

Run your Foundry-backed runtime through an OSuite bridge while OSuite remains the workspace, approval, replay, and proof authority.

.env

OSUITE_BASE_URL=https://studio.osuite.ai
OSUITE_API_KEY=<your-workspace-api-key>
OSUITE_AGENT_ID=foundry-governed-agent
AZURE_OPENAI_ENDPOINT=https://<your-resource>.openai.azure.com/
AZURE_OPENAI_API_KEY=<your-azure-openai-key>
AZURE_OPENAI_DEPLOYMENT=<your-foundry-deployment>

Attach your runtime bridge

Your runtime bridge should submit governed decisions, wait for operator approval when required, and export proof without making Foundry the governance authority.

bridge

# Start your Foundry-backed runtime with an OSuite bridge
OSUITE_BASE_URL=https://studio.osuite.ai \
OSUITE_API_KEY=<your-workspace-api-key> \
OSUITE_AGENT_ID=foundry-governed-agent \
AZURE_OPENAI_ENDPOINT=https://<your-resource>.openai.azure.com/ \
AZURE_OPENAI_API_KEY=<your-azure-openai-key> \
AZURE_OPENAI_DEPLOYMENT=<your-foundry-deployment> \
<your-foundry-runtime-bridge>

# Submit a governed task through the bridge
<your-foundry-runtime-bridge> \
  --goal "Review a procurement request and produce a buyer-ready governed proof" \
  --instruction "Assess the vendor access request, route any approval required by policy, and complete the governed proof export for buyer review."

Drive approvals and exports from OSuite

Once the bridge is active, operators should review Decisions in OSuite, approve high-risk requests, and use Replay, Proof, and Verify as the customer-facing evidence surfaces.

Verify runtime family and trust materials

The resulting decision should read as managed_agent_platform + bridge, with Trust Boundary materials preserved in the envelope.

What success looks like

Open /replay and confirm the action carries managed_agent_platform, bridge mode, and Trust Boundary receipt material.

Navigate to /decisions in your OSuite instance. Your action should appear in the ledger within seconds of the agent run.

Governance as Code

Drop a guardrails.yml in your project root to enforce policies without code changes. OSuite evaluates these rules at the guard step before any action executes.

guardrails.yml

version: 1
project: foundry-managed-runtime
policies:
  - id: bridge_high_assurance_foundry
    applies_to:
      action_types:
        - azure.foundry.tool_call
    when:
      min_risk_score: 50
    rule:
      require: approval