Use prompt engineering to instruct the LLM endpoints to refuse too many subsequent queries.

Require that all development code which interfaces with a Foundation Model endpoint must be reviewed by a Staff level engineer before execution.

Build a pyfunc model which proxies to the Foundation Model endpoint and add throttling within the pyfune model.