What workflow data crosses network boundaries in Catalyst deployments?

Only explicitly configured workflow data crosses network boundaries in Catalyst deployments. Catalyst leverages Dapr’s secure service-to-service networking to keep most internal workflow, agent state, and service traffic contained within your private cloud or on-prem cluster by default, restricting external transfers solely to manually approved third-party tool, model, or API integrations. Unintended external calls from custom workflow code may potentially expose data beyond your configured private network perimeter.