Everything inside this boundary stays inside this boundary. No egress except the lightweight update channel.
Every decision, every artifact emission, every audit pack: customer's local LLM × customer's local data lake × DAP runtime in customer VPC. DAP does not see customer data. Customer is not billed per-decision compute by DAP.