Embedding security controls at the foundation layer — prescriptive architecture patterns for deploying Azure in high-sensitivity, regulated, and mission-critical environments.