Skip to content
Agent Governance Toolkit
Changelog
English
日本語
한국어
简体中文
繁體中文
Initializing search
microsoft/agent-governance-toolkit
Home
Getting Started
Packages
Agent Skills
Tutorials
Deployment
Security
Compliance
Conformance
Studio
Specifications
Architecture Decisions
Reference
Agent Governance Toolkit
microsoft/agent-governance-toolkit
Home
Getting Started
Getting Started
Quick Start
Architecture
Glossary
Workshop
Workshop
Overview
Prerequisites
Lab Guide
Facilitator Notes
Slides
Packages
Packages
Package guide
Agent Control Specification
Standalone packages
Standalone packages
Agent Marketplace
Agent Lightning
SDKs and developer tools
SDKs and developer tools
.NET package
VS Code Extension
Antigravity CLI governance
Claude Code governance
Copilot CLI governance
OpenCode CLI governance
Compatibility component docs
Compatibility component docs
Agent OS
Agent Mesh
Agent Runtime
Agent SRE
Agent Hypervisor
Legacy unified installer
Agent Skills
Agent Skills
Overview
AGT policy authoring
Tutorials
Tutorials
Overview
Policy Engine
Trust & Identity
Framework Integrations
Audit & Compliance
Agent Reliability
Execution Sandboxing
MCP Security Gateway
Agent Control Specification
OPA / Rego / Cedar Policies
Prompt Injection Detection
Plugin Marketplace
Saga Orchestration
Observability & Tracing
Kill Switch & Rate Limiting
RL Training Governance
Protocol Bridges
Advanced Trust
Compliance Verification
.NET package
C# MCP extension
TypeScript package
Rust crate
Go module
Delegation Chains
Cost & Token Budgets
Security Hardening
SBOM & Signing
MCP Scan CLI
Build Custom Integration
Agent Discovery
Agent Lifecycle
Entra Agent ID Bridge
E2E Encrypted Messaging
Offline Verifiable Receipts
MAF Integration
Policy Composition
Two-Line Governance
Multi-Stage Policy Pipeline
Approval Workflows
DLP Attribute Ratchets
OpenTelemetry Observability
Advisory Defense in Depth
.NET MAF Hook Integration
A2A Conversation Policy
Shift-Left Governance
Copilot CLI Governance
Red-Team Testing
Intent-Based Authorization
Multi-Agent Policies
Decision BOM
Cost Governance
Chaos Testing Agents
Contributor Governance
Antigravity CLI Governance
OpenCode CLI Governance
Progressive Governance
Retrofit Governance
Policy as Code
Policy as Code
Your First Policy
Capability Scoping
Rate Limiting
Conditional Policies
Approval Workflows
Policy Testing
Policy Versioning
MCP Governance Policies
Integration Guides
Integration Guides
Citadel
External Operation Accountability
MCP Trust
Deployment
Deployment
Overview
Azure Container Apps
Azure Foundry Agent Service
AWS ECS / Fargate
Google Cloud GKE
OpenClaw Sidecar
Private Endpoints
Security
Security
Overview
OWASP Compliance
Threat Model
Security Scanning
Tenant Isolation
Context Accumulation Governance
Trust Score Calibration
Audits
Policy Guides
Policy Guides
AI Security Guidance
Autonomous Contributions
Reporting a Vulnerability
Compliance
Compliance
Overview
OWASP ASI 2026 (Reference Architecture)
OWASP ASI Policy-Rule Mapping
OWASP LLM Top 10
OWASP MCP Top 10
NSA MCP Alignment
NIST AI RMF Alignment
NIST RFI 2026-00206
EU AI Act Checklist
SOC 2 Mapping
ISO/IEC 42001 Mapping
CIS Controls v8.1 Mapping
CSA Agentic Trust Framework
FRIA Template
Impact Assessment Template
Incident Response Workflow
Post-Market Monitoring
Record Retention Policy
Data Provenance Model
Conformance
Studio
Studio
Engine API Contract
Specifications
Specifications
Agent OS Policy Engine
Framework Adapter Contract
AgentMesh Identity & Trust
Agent Hypervisor Execution Control
AgentMesh Trust & Coordination
AgentMesh Wire Protocol
Agent SRE Governance
MCP Security Gateway
Agent Lightning Fast-Path
Audit & Compliance
Architecture Decisions
Architecture Decisions
Overview
ADR-0001: Ed25519 for Identity
ADR-0002: Four Execution Rings
ADR-0003: IATP Handshake 200ms
ADR-0004: Deterministic Policy
ADR-0005: Liveness Attestation
ADR-0006: Constitutional Constraints
ADR-0007: JWKS Federation
ADR-0008: Cross-Org Policy Federation
ADR-0009: RFC 9334 RATS Alignment
ADR-0010: TEE Keystore SEV-SNP
ADR-0011: Additive Policy Contract
ADR-0012: Cost Governance
ADR-0013: Fail Closed on Errors
ADR-0014: Parent Deny Immutable
ADR-0015: Pluggable Policy Backends
ADR-0016: Trust Ceiling Propagation
ADR-0017: Merkle Audit Chain
ADR-0018: Reconstructible Decision BOM
ADR-0019: OTel Event Sink Pattern
ADR-0020: Circuit Breaker for Sinks
ADR-0021: CloudEvents Envelope
ADR-0022: Compliance Auto-Mapping
ADR-0023: Hypervisor Delta Engine
ADR-0024: RL Training Governance
ADR-0025: Structural Typing Protocols
ADR-0026: Foundry AI Gateway Functions PDP
ADR-0027: Dual-Stack MCP Migration
ADR-0028: AGT Studio Unified UI
ADR-0029: Policy Distribution and Registries
ADR-0030: Action-Bound Approval Protocol
ADR-0031: Optional Embedding Detection
ADR-0032: Trace v0.1 Trust Records
Proposals
Reference
Reference
Project
Project
Adopters
Technical Charter
Community
FAQ
Governance
Independence
Limitations
Maintainers
Roadmap
Engineering
Engineering
Error Handling
Integration Tiers
Package Feature Matrix
Publishing
Release Process
RFC Process
Testing Guide
V4 Removal
Wire Protocol Facets
Architecture
Architecture
Modern Agent Architecture
Agent 365 Reference Architecture
Benchmarks
Benchmarks
Governance Overhead
Benchmark Catalog
Prompt Injection Evaluation
Prompt Injection Methodology
Comparisons
Comparisons
Current Comparison
Extended Comparison
Case Studies
Case Studies
Ecommerce Customer Service
Financial Trading Compliance
Healthcare Prior Authorization
Operations
Operations
Advisory to Blocking Graduation
Pre-Commit Hook Template
Release Notes
Release Notes
v1.0.0
v2.1.0
v2.2.0
v2.3.0
v3.0.0
v3.1.0
v3.1.1
v3.2.0
v3.6.0
v3.7.0
NIST RFI Mapping
Changelog
Contributing
Home
Reference
Changelog
¶
Documentation coming soon.
Back to top