Understand the complete system boundary
Ask where data goes and which actions the whole system allows.
Reviewed: 2026-10-03
Source-based teaching example · Fictional data
Narration: Microsoft Mark · locally synthesized

00:00:00.000 — What you will learn

Ask where data goes and which actions the whole system allows.

Visual description:
Ask where data goes and which actions the whole system allows.

00:00:06.542 — The idea

Map the model, search, logs and tools separately. Local inference does not mean the whole system is offline. Reading and sending need different permissions.

Visual description:
Map the model, search, logs and tools separately. Local inference does not mean the whole system is offline. Reading and sending need different permissions.

00:00:19.958 — One useful term

System boundary. The components, data paths and actions included in the system being reviewed.

Visual description:
The components, data paths and actions included in the system being reviewed.

00:00:29.500 — A worked example

The offering runs inference on an office computer. Embeddings use a remote service, logs use a hosted dashboard, and the agent can send messages. Those paths need separate review.

Visual description:
The offering runs inference on an office computer. Embeddings use a remote service, logs use a hosted dashboard, and the agent can send messages. Those paths need separate review.

00:00:44.708 — Your turn to think

Can the vendor call the entire workflow offline because inference is local? Pause and decide before continuing.

Visual description:
Can the vendor call the entire workflow offline because inference is local?
Pause the video if you need more time.

00:01:02.625 — Why this answer works

No. Ask for destination, retention, access and action-authority evidence before sensitive use.

Visual description:
No. Ask for destination, retention, access and action-authority evidence before sensitive use.

00:01:12.708 — Check 1

Keep remote destinations visible.

Visual description:
Keep remote destinations visible.

00:01:17.750 — Check 2

Separate read access from sending approval.

Visual description:
Separate read access from sending approval.

00:01:23.208 — Check 3

Do not infer compliance from appearance or location.

Visual description:
Do not infer compliance from appearance or location.

00:01:29.375 — Now try a different case

Open the lesson and try its different practice case. Use every check in the full task. Watching alone does not mark the lesson complete.

Visual description:
Open the lesson
Try the new case
Check and revise
The full task and its requirements are in the linked lesson.