docs(architect): weekly KB update — 66 files refreshed (2026-04)

Updated 66 stale knowledge base reference files (10 critical, 56 high)
across all 5 skills using Microsoft Learn MCP research.

Key factual updates:
- Groundedness Detection API: `correction` → `mitigating` param,
  `correctedText` → `correctionText` (breaking change)
- Copilot Studio: GPT-4.1 mini now default (was GPT-4o mini);
  Claude Sonnet 4.5 + Opus 4.5 added (experimental, 200K ctx)
- Agentic Retrieval: still public preview; 50M free tokens/month
- Azure security baselines: "Cognitive Services" → "Foundry Tools"
- Databricks: Delta Live Tables → Lakeflow Spark Declarative Pipelines
- MLflow 3 GenAI: new Feedback/Expectation data model
- Token tracking doc: "Azure OpenAI in Foundry Models through a gateway"
- Agent Registry: Risks column (M365 E7), Graph API (preview)
- Copilot DLP: new Entra AI Admin + Purview Data Security AI Admin roles
- ISO/IEC 42001: scope expanded to M365 Copilot, Foundry, Security Copilot
- Zero Trust: CAE now via Conditional Access, Strict Location Enforcement
- Purview: new Fabric Copilots/agents governance section
- AG-UI HITL: ApprovalRequiredAIFunction (C#), @tool approval_mode (Python)

All files: Last updated → 2026-04, *(Verified MCP 2026-04)* markers added.
Build registry: 1341 URLs from 387 files (+2 new URLs).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

skills/ms-ai-governance/references/monitoring-observability/data-residency-audit-monitoring.md

@@ -1,6 +1,6 @@
 # Data Residency and Geographic Audit Monitoring
 
-**Last updated:** 2026-02
+**Last updated:** 2026-04
 **Status:** GA
 **Category:** Monitoring & Observability
 
@@ -56,12 +56,15 @@ Resources
 **Azure:**
 - Regional services: Deploy i EU/EFTA regions (Norway East, West Europe, etc.)
 - Non-regional services: Konfigurer via Azure Resource Manager til EU Data Boundary
+- **OBS (2026-04):** Azure Resource Manager EU Data Boundary kan kun konfigureres for **nye tenants uten eksisterende subscriptions/ressurser**. Eksisterende ressurser kan ikke flyttes inn eller ut av tenant med EU Data Boundary. *(Verified MCP 2026-04)*
+- **Application Change Analysis:** Lagres og prosesseres globalt — ikke tilgjengelig i EU Data Boundary. Bruk Azure Policy + Resource Graph som alternativ.
 - Validation: Azure Policy kan enforces geographic constraints
 
 **Dynamics 365 & Power Platform:**
 - Geographic area (Geo) basert på billing address
 - Provision tenant og environments i EU Data Boundary Geo
 - Data residency følger environment-plassering
+- **Copilot/generative AI (2026-04):** For EU-miljøer i EU Data Boundary brukes Azure OpenAI-endepunkt innenfor samme boundary. "Allow flex routing during periods of peak load"-checkbox tilgjengelig for EU-miljøer. Bing Search-data prosesseres i USA selv ved EU-residency. *(Verified MCP 2026-04)*
 
 **Microsoft 365:**
 - Automatisk EU Data Boundary for tenants med sign-up i EU/EFTA
@@ -482,11 +485,12 @@ For norsk offentlig sektor med AI workloads: **Start single-region (Norway East)
 
 1. [What is the EU Data Boundary?](https://learn.microsoft.com/en-us/privacy/eudb/eu-data-boundary-learn)
    - **Confidence:** Verified
-   - **Relevans:** Definisjon av EU Data Boundary, configuration guidance, datacenter locations
+   - **Sist oppdatert av Microsoft:** 26. februar 2025
+   - **Relevans:** Definisjon av EU Data Boundary, configuration guidance, datacenter locations. Inkluderer nå Microsoft Fabric, Power BI Embedded, Translator (europeisk endepunkt). Azure Resource Manager EUDB kun for nye tenants. *(Verified MCP 2026-04)*
 
 2. [Configuring Azure non-regional services for the EU Data Boundary](https://learn.microsoft.com/en-us/privacy/eudb/eu-data-boundary-configure-azure-nonregional-services)
    - **Confidence:** Verified
-   - **Relevans:** Bot Service, Communication Services, Azure Stack Edge/Hub configuration
+   - **Relevans:** Bot Service, Communication Services, Azure Stack Edge/Hub, Azure Local (tidl. Azure Stack HCI), Azure Migrate, Azure VM Image Builder, Cloud Shell, Microsoft Fabric, Power BI Embedded, Translator (EU-endepunkt), Microsoft Entra ID. Application Change Analysis lagres fortsatt globalt. *(Verified MCP 2026-04)*
 
 3. [Audit logging and monitoring overview](https://learn.microsoft.com/en-us/compliance/assurance/assurance-audit-logging)
    - **Confidence:** Verified
@@ -508,9 +512,9 @@ For norsk offentlig sektor med AI workloads: **Start single-region (Norway East)
    - **Confidence:** Verified
    - **Relevans:** EUDB compliance for voice, video, chat, SMS, email capabilities
 
-8. [Move data across regions for Copilots and generative AI features](https://learn.microsoft.com/en-us/power-platform/admin/geographical-availability-copilot)
+8. [Move data across regions for Copilots, AI agents, and generative AI features](https://learn.microsoft.com/en-us/power-platform/admin/geographical-availability-copilot)
    - **Confidence:** Verified
-   - **Relevans:** Azure OpenAI endpoint regions, consent requirements, data movement
+   - **Relevans:** Azure OpenAI endpoint regions for EU (EU Data Boundary), Bing Search alltid USA, ny "Allow flex routing during periods of peak load" for EU, Microsoft 365 services checkbox nå separat. Tittel oppdatert til å inkludere "AI agents". *(Verified MCP 2026-04)*
 
 ### Azure Resource Graph Samples
 
@@ -548,5 +552,5 @@ For norsk offentlig sektor med AI workloads: **Start single-region (Norway East)
 - **Verified sections (85%):** Microsoft EU Data Boundary, Purview Audit, Azure Monitor, Copilot Studio, Communication Services, compliance certifications
 - **Baseline sections (15%):** AI Act specifics (enforcement starts 2026-08), Schrems II case law interpretation, Norwegian public sector specific guidance
 
-**Sist oppdatert:** 2026-02-05
+**Sist oppdatert:** 2026-04
 **Neste review:** 2026-08 (etter AI Act enforcement start)