Skip to main content

Agent Governance

Unified installer and runtime policy enforcement for the Agent Governance Toolkit

One install for the complete governance stack — kernel · trust mesh · runtime supervisor · reliability engineering

CI License Python PyPI

pip install agent-governance-toolkit[full]

Architecture • Quick Start • Components • Why Unified? • Ecosystem • OWASP Compliance • Traction

⭐ If this project helps you, please star it! It helps others discover the agent governance stack.

🔗 Part of the Agent Governance Ecosystem — Installs Agent OS · AgentMesh · Agent Runtime · Agent SRE

Migrating from ai-agent-compliance? The package has been renamed to agent-governance-toolkit. Run pip install agent-governance — the old name is deprecated and will redirect here for 6 months.


Architecture

┌─────────────────────────────────────────────────────────────────┐
│                      agent-governance                            │
│                  pip install agent-governance-toolkit[full]              │
├─────────────────────────────────────────────────────────────────┤
│                                                                 │
│   ┌───────────────────┐      ┌───────────────────────────┐     │
│   │   Agent OS Kernel │◄────►│   AgentMesh Platform      │     │
│   │                   │      │                           │     │
│   │  Policy Engine    │      │  Zero-Trust Identity      │     │
│   │  Capability Model │      │  Mutual TLS for Agents    │     │
│   │  Audit Logging    │      │  Encrypted Channels       │     │
│   │  Syscall Layer    │      │  Trust Scoring             │     │
│   └────────┬──────────┘      └─────────────┬─────────────┘     │
│            │                               │                   │
│            ▼                               ▼                   │
│   ┌───────────────────┐      ┌───────────────────────────┐     │
│   │ Agent Runtime     │      │   Agent SRE               │     │
│   │                   │      │                           │     │
│   │  Execution Rings  │      │  Health Monitoring        │     │
│   │  Resource Limits  │      │  SLO Enforcement          │     │
│   │  Runtime Sandboxing│     │  Incident Response        │     │
│   │  Kill Switch      │      │  Chaos Engineering        │     │
│   └───────────────────┘      └───────────────────────────┘     │
│                                                                 │
└─────────────────────────────────────────────────────────────────┘

Quick Start

import asyncio
from agent_os import StatelessKernel, ExecutionContext
from agentmesh import AgentIdentity

# Boot the governance kernel
kernel = StatelessKernel()
ctx = ExecutionContext(agent_id="my-agent", policies=["read_only"])

# Establish zero-trust agent identity
identity = AgentIdentity.create(
    name="my-agent",
    sponsor="alice@company.com",
    capabilities=["read:data", "write:reports"],
)

# Execute a governed action
async def main():
    result = await kernel.execute(
        action="database_query",
        params={"query": "SELECT * FROM users"},
        context=ctx,
    )
    print(f"Success: {result.success}, Data: {result.data}")

asyncio.run(main())

Compliance Grading

Check your governance coverage with a compliance grade:

from agent_compliance.verify import GovernanceVerifier

verifier = GovernanceVerifier()
attestation = verifier.verify()
print(f"Grade: {attestation.compliance_grade()}")  # A, B, C, D, or F
print(f"Coverage: {attestation.coverage_pct()}%")
print(attestation.badge_markdown())

Install only what you need:

# Core: kernel + trust mesh
pip install agent-governance-toolkit

# Full stack: adds runtime + SRE
pip install agent-governance-toolkit[full]

# À la carte
pip install agent-governance-toolkit[runtime]
pip install agent-governance-toolkit[sre]

Components

Package Role
Agent OS Policy engine — deterministic action evaluation
AgentMesh Trust infrastructure — identity, credentials, protocol bridges
Agent Runtime Execution supervisor — rings, sessions, sagas
Agent SRE Reliability — SLOs, circuit breakers, chaos testing
Agent Compliance Regulatory compliance — GDPR, HIPAA, SOX frameworks (this package)
Agent Marketplace Plugin lifecycle — discover, install, verify, sign
Agent Lightning RL training governance — governed runners, policy rewards

Star the ecosystem

Agent OS Stars   AgentMesh Stars   Agent Runtime Stars   Agent SRE Stars


Why a Unified Governance Stack?

Running AI agents in production without governance is like deploying microservices without TLS, RBAC, or monitoring. Each layer solves a different problem:

Concern Without Governance With Agent Governance
Security Agents call any tool, access any resource Capability-based permissions, policy enforcement
Trust No identity verification between agents Mutual TLS, trust scores, encrypted channels
Control Runaway agents consume unbounded resources Execution rings, resource limits, kill switches
Reliability Silent failures, no observability SLO enforcement, health checks, incident automation
Compliance No audit trail for agent decisions Immutable audit logs, decision lineage tracking

One install. Four layers of protection.

The meta-package ensures all components are version-compatible and properly integrated. No dependency conflicts, no version mismatches — just a single pip install to go from zero to production-grade agent governance.


The Agent Governance Ecosystem

agent-governance ─── The meta-package (you are here)
├── agent-os-kernel ─── Governance kernel
├── agentmesh-platform ─── Zero-trust mesh
├── agentmesh-runtime ─── Runtime supervisor (optional)
└── agent-sre ─── Reliability engineering (optional)

Each component works standalone, but they're designed to work together. The kernel enforces policy, the mesh secures communication, the runtime controls execution, and SRE keeps everything running.


Examples

See the examples/ directory for runnable demos:

# Quick start — boot the governance stack in 30 lines
python examples/quickstart.py

# Full stack — all 4 layers working together
python examples/governed_agent.py

Framework Integration

# LangChain
pip install langchain agent-governance

# CrewAI
pip install crewai agent-governance

# AutoGen
pip install pyautogen agent-governance

🗺️ Roadmap

Quarter Milestone
Q1 2026 ✅ Unified meta-package, 4 components integrated, PyPI published
Q2 2026 Cross-component integration tests, unified CLI, dashboard UI
Q3 2026 Helm chart for Kubernetes, managed cloud preview
Q4 2026 SOC2 Type II certification, enterprise support tier

🛡️ OWASP Agentic Top 10 Coverage

The agent governance stack covers 10 of 10 risks from the OWASP Top 10 for Agentic Applications (2026):

OWASP Risk Coverage Component
Agent Goal Hijack ✅ Agent OS — Policy Engine
Tool Misuse ✅ Agent OS — Capability Sandboxing
Identity & Privilege Abuse ✅ AgentMesh — DID Identity
Supply Chain Vulnerabilities ✅ AgentMesh — AI-BOM v2.0
Unexpected Code Execution ✅ Agent Runtime — Execution Rings
Memory & Context Poisoning ✅ Agent OS — VFS + CMVK
Insecure Inter-Agent Communication ✅ AgentMesh — IATP Protocol
Cascading Agent Failures ✅ Agent SRE — Circuit Breakers
Human-Agent Trust Exploitation ✅ Agent OS — Approval Workflows
Rogue Agents ✅ Agent Runtime — Kill Switch

→ Full OWASP compliance mapping with code examples


📈 Traction

The ecosystem is growing — 3,000+ views, 9,400+ clones, and 1,278 unique developers in the last 14 days alone. Traffic from Medium, Reddit, LinkedIn, Google, and even ChatGPT.

→ See full traction report


Contributing

We welcome contributions! See our Contributing Guide for details.

For component-specific contributions, see:

License

MIT — see LICENSE for details.


github.com/microsoft/agent-governance-toolkit · Documentation · GitHub

Building the governance layer for the agentic era

Metadata

Release files for agent-governance-toolkit-compliance 5.0.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for agent-governance-toolkit-compliance 5.0.0
File Size Uploaded Provenance
agent_governance_toolkit_compliance-5.0.0.tar.gz 128.4 kB Without provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for agent-governance-toolkit-compliance 5.0.0
File Interpreter ABI Platform
agent_governance_toolkit_compliance-5.0.0-py3-none-any.whl Python 3 none any Details

Total release size: 218.0 kB

Release files / agent_governance_toolkit_compliance-5.0.0.tar.gz

Download URL agent_governance_toolkit_compliance-5.0.0.tar.gz
Size 128.4 kB
Tags Source
SHA-256 checksum
How to use checksums
752dfa077a5d3156274c55abf216c09769f85fb0c0ed875fb9c4c76cdff7c9a5
BLAKE2b-256 checksum
How to use checksums
3b1d9cc17683632248ded8937a946ed21482d3a1f1489714e359ad251a216917
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via RestSharp/106.13.0.0

Release files / agent_governance_toolkit_compliance-5.0.0-py3-none-any.whl

Download URL agent_governance_toolkit_compliance-5.0.0-py3-none-any.whl
Size 89.7 kB
Tags Python 3
SHA-256 checksum
How to use checksums
8953a66ddc2b19f608d1a7be44976f7011c8c3288159ba00f0414b0ededce3f3
BLAKE2b-256 checksum
How to use checksums
684199cf3ed2e884b323028ff849a8f3624f5ec42494072f2129c0a8b9358e9e
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via RestSharp/106.13.0.0

Security for agent-governance-toolkit-compliance 5.0.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

5.0.0 This release

2 release files No provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page