This design assumes a centralised enterprise security operating model where identity is the primary control plane and all AI workloads operate under strict Zero Trust enforcement on Azure. Governance is embedded upfront and continuously, with ownership anchored in platform-level controls rather than distributed teams. Consumption follows a least-privilege discipline with tightly governed access and auditable execution paths. Enforcement is anchored through Microsoft Entra ID and Azure Policy to maintain identity integrity and compliance consistency.