v5.1.0

Changed

• Add optional component egress declarations with an exact FQDN, HTTP(S) protocol, port and purpose. Existing definitions remain valid; an explicit empty array declares no additional runtime egress.
• Show the declaration plan before provisioning and resolve actual workload subnet prefixes before reconciling application-owned Azure Firewall rules. Deduplicate shared destinations and preserve dependencies until their final declared owner is removed.
• Preserve unrelated rules and foundation policy content, reject ownership collisions and concurrent changes, and remove only this application's marked requirements.
• Keep externally managed policies report-only and perform no firewall operations for non-isolated deployments. This feature does not create a firewall.
• Declare the orchestrator and ingestion tokenizer download dependency on openaipublic.blob.core.windows.net over HTTPS/443. The UI declares no additional fixed runtime destinations.
• Update the central current-release documentation for custom declarations, policy ownership, source-subnet scope, permissions and rollback.

Component versions

Component	Version
agent-app-ui	v3.3.1
agent-app-orchestrator	v5.2.2
agent-app-ingestion	v3.1.2
infra / AI Landing Zone	v2.7.3

Validation

• Declaration, component-selection, deduplication, ownership, reconciliation and management-plane boundary regressions, with PowerShell/shell hook behavior checks.
• Bicep build/lint and offline foundation contracts with unchanged protected graph fingerprints and the closed platform-outputs v1 schema.
• Real cold-cache tokenizer initialization using the pinned ingestion and orchestrator tiktoken versions.
• Strict central documentation build and published runtime tag/commit verification.