Cap tool-call loops explicitly
Set a hard iteration limit on automatic function invocation and treat hitting it as an explicit application outcome.
Csharp
Embeddings in .NET
How to generate text embeddings with Microsoft.Extensions.AI and keep the model, dimensions, comparison metric, and indexing behavior compatible.
Designing an AI Service Layer
How to place model access, prompts, retrieval, tools, and application policy behind a maintainable use-case boundary in a .NET application.
Use App Configuration for operational switches
Keep runtime switches and adjustable operational settings in Azure App Configuration instead of requiring a deployment for every change.
Validate tool arguments at the execution boundary
Treat model-generated tool arguments as untrusted input even when they satisfy the generated schema and bind successfully to the expected C# types.
Treat CORS as a browser boundary, not API authorization
Use CORS to control browser-script access across origins, while enforcing API permissions with authentication and authorization.
Set request body limits intentionally
Choose global and endpoint-specific request body limits instead of inheriting accidental defaults for uploads and APIs.
Stop Letting Provider SDKs Define Your .NET AI Architecture
How Microsoft.Extensions.AI keeps provider SDKs at the edge of .NET applications through shared abstractions, dependency injection, and middleware.
Treat uploaded files as untrusted
Keep uploads quarantined until required metadata, content, and resource checks succeed, while treating client filenames as untrusted.
Use streaming for large or frequent uploads
Use MultipartReader when buffered ASP.NET Core uploads put too much pressure on memory, temporary-disk capacity, or disk I/O.