Scenario: A retailer runs a customer-support agent named Agent1 on Microsoft Foundry. Agent1 grounds its answers on product sheets kept in a blob container. A governance rule requires that Agent1 must not disclose any customer data in its replies, including cases where a file holding customer records is mistakenly uploaded to that product-sheet container.
You must configure Agent1 so it satisfies this governance rule.
Which capability should you apply?