Skip to main content

Agent Governance

Unified installer and runtime policy enforcement for the Agent Governance Toolkit

One install for the complete governance stack — kernel · trust mesh · runtime supervisor · reliability engineering

CI License Python PyPI

[!IMPORTANT] Public Preview — The agent-governance-toolkit package on PyPI is a public preview release. APIs may change before GA.

pip install agent-governance-toolkit[full]

Architecture • Quick Start • Components • Why Unified? • Ecosystem • OWASP Compliance • Traction

⭐ If this project helps you, please star it! It helps others discover the agent governance stack.

🔗 Part of the Agent Governance Ecosystem — Installs Agent OS · AgentMesh · Agent Runtime · Agent SRE

Migrating from ai-agent-compliance? The package has been renamed to agent-governance-toolkit. Run pip install agent-governance — the old name is deprecated and will redirect here for 6 months.


Architecture

┌─────────────────────────────────────────────────────────────────┐
│                      agent-governance                            │
│                  pip install agent-governance-toolkit[full]              │
├─────────────────────────────────────────────────────────────────┤
│                                                                 │
│   ┌───────────────────┐      ┌───────────────────────────┐     │
│   │   Agent OS Kernel │◄────►│   AgentMesh Platform      │     │
│   │                   │      │                           │     │
│   │  Policy Engine    │      │  Zero-Trust Identity      │     │
│   │  Capability Model │      │  Mutual TLS for Agents    │     │
│   │  Audit Logging    │      │  Encrypted Channels       │     │
│   │  Syscall Layer    │      │  Trust Scoring             │     │
│   └────────┬──────────┘      └─────────────┬─────────────┘     │
│            │                               │                   │
│            ▼                               ▼                   │
│   ┌───────────────────┐      ┌───────────────────────────┐     │
│   │ Agent Runtime     │      │   Agent SRE               │     │
│   │                   │      │                           │     │
│   │  Execution Rings  │      │  Health Monitoring        │     │
│   │  Resource Limits  │      │  SLO Enforcement          │     │
│   │  Runtime Sandboxing│     │  Incident Response        │     │
│   │  Kill Switch      │      │  Chaos Engineering        │     │
│   └───────────────────┘      └───────────────────────────┘     │
│                                                                 │
└─────────────────────────────────────────────────────────────────┘

Quick Start

import asyncio
from agent_os import StatelessKernel, ExecutionContext
from agentmesh import AgentIdentity

# Boot the governance kernel
kernel = StatelessKernel()
ctx = ExecutionContext(agent_id="my-agent", policies=["read_only"])

# Establish zero-trust agent identity
identity = AgentIdentity.create(
    name="my-agent",
    sponsor="alice@company.com",
    capabilities=["read:data", "write:reports"],
)

# Execute a governed action
async def main():
    result = await kernel.execute(
        action="database_query",
        params={"query": "SELECT * FROM users"},
        context=ctx,
    )
    print(f"Success: {result.success}, Data: {result.data}")

asyncio.run(main())

Compliance Grading

Check your governance coverage with a compliance grade:

from agent_compliance.verify import GovernanceVerifier

verifier = GovernanceVerifier()
attestation = verifier.verify()
print(f"Grade: {attestation.compliance_grade()}")  # A, B, C, D, or F
print(f"Coverage: {attestation.coverage_pct()}%")
print(attestation.badge_markdown())

Install only what you need:

# Core: kernel + trust mesh
pip install agent-governance-toolkit

# Full stack: adds runtime + SRE
pip install agent-governance-toolkit[full]

# À la carte
pip install agent-governance-toolkit[runtime]
pip install agent-governance-toolkit[sre]

Components

Package Role
Agent OS Policy engine — deterministic action evaluation
AgentMesh Trust infrastructure — identity, credentials, protocol bridges
Agent Runtime Execution supervisor — rings, sessions, sagas
Agent SRE Reliability — SLOs, circuit breakers, chaos testing
Agent Compliance Regulatory compliance — GDPR, HIPAA, SOX frameworks (this package)
Agent Marketplace Plugin lifecycle — discover, install, verify, sign
Agent Lightning RL training governance — governed runners, policy rewards

Star the ecosystem

Agent OS Stars   AgentMesh Stars   Agent Runtime Stars   Agent SRE Stars


Why a Unified Governance Stack?

Running AI agents in production without governance is like deploying microservices without TLS, RBAC, or monitoring. Each layer solves a different problem:

Concern Without Governance With Agent Governance
Security Agents call any tool, access any resource Capability-based permissions, policy enforcement
Trust No identity verification between agents Mutual TLS, trust scores, encrypted channels
Control Runaway agents consume unbounded resources Execution rings, resource limits, kill switches
Reliability Silent failures, no observability SLO enforcement, health checks, incident automation
Compliance No audit trail for agent decisions Immutable audit logs, decision lineage tracking

One install. Four layers of protection.

The meta-package ensures all components are version-compatible and properly integrated. No dependency conflicts, no version mismatches — just a single pip install to go from zero to production-grade agent governance.


The Agent Governance Ecosystem

agent-governance ─── The meta-package (you are here)
├── agent-os-kernel ─── Governance kernel
├── agentmesh-platform ─── Zero-trust mesh
├── agentmesh-runtime ─── Runtime supervisor (optional)
└── agent-sre ─── Reliability engineering (optional)

Each component works standalone, but they're designed to work together. The kernel enforces policy, the mesh secures communication, the runtime controls execution, and SRE keeps everything running.


Examples

See the examples/ directory for runnable demos:

# Quick start — boot the governance stack in 30 lines
python examples/quickstart.py

# Full stack — all 4 layers working together
python examples/governed_agent.py

Framework Integration

# LangChain
pip install langchain agent-governance

# CrewAI
pip install crewai agent-governance

# AutoGen
pip install pyautogen agent-governance

🗺️ Roadmap

Quarter Milestone
Q1 2026 ✅ Unified meta-package, 4 components integrated, PyPI published
Q2 2026 Cross-component integration tests, unified CLI, dashboard UI
Q3 2026 Helm chart for Kubernetes, managed cloud preview
Q4 2026 SOC2 Type II certification, enterprise support tier

🛡️ OWASP Agentic Top 10 Coverage

The agent governance stack covers 10 of 10 risks from the OWASP Top 10 for Agentic Applications (2026):

OWASP Risk Coverage Component
Agent Goal Hijack ✅ Agent OS — Policy Engine
Tool Misuse ✅ Agent OS — Capability Sandboxing
Identity & Privilege Abuse ✅ AgentMesh — DID Identity
Supply Chain Vulnerabilities ✅ AgentMesh — AI-BOM v2.0
Unexpected Code Execution ✅ Agent Runtime — Execution Rings
Memory & Context Poisoning ✅ Agent OS — VFS + CMVK
Insecure Inter-Agent Communication ✅ AgentMesh — IATP Protocol
Cascading Agent Failures ✅ Agent SRE — Circuit Breakers
Human-Agent Trust Exploitation ✅ Agent OS — Approval Workflows
Rogue Agents ✅ Agent Runtime — Kill Switch

→ Full OWASP compliance mapping with code examples


📈 Traction

The ecosystem is growing — 3,000+ views, 9,400+ clones, and 1,278 unique developers in the last 14 days alone. Traffic from Medium, Reddit, LinkedIn, Google, and even ChatGPT.

→ See full traction report


Contributing

We welcome contributions! See our Contributing Guide for details.

For component-specific contributions, see:

License

MIT — see LICENSE for details.


github.com/microsoft/agent-governance-toolkit · Documentation · GitHub

Building the governance layer for the agentic era

Metadata

Release files for agent_governance_toolkit 4.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for agent_governance_toolkit 4.1.0
File Size Uploaded
agent_governance_toolkit-4.1.0.tar.gz 127.4 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for agent_governance_toolkit 4.1.0
File Interpreter ABI Platform
agent_governance_toolkit-4.1.0-py3-none-any.whl Python 3 none any Details

Total release size: 216.8 kB

Release files / agent_governance_toolkit-4.1.0.tar.gz

Download URL agent_governance_toolkit-4.1.0.tar.gz
Size 127.4 kB
Tags Source
SHA-256 checksum
How to use checksums
53cc78282029f5d5fd2bb37fd50b441df27d838cf3ecbed557184d4f99b2e951
BLAKE2b-256 checksum
How to use checksums
3fbf4b0bc84f40d97b61e567dfe94549ab4bdf655d7634ab65fba57266008ab3
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via RestSharp/106.13.0.0

Release files / agent_governance_toolkit-4.1.0-py3-none-any.whl

Download URL agent_governance_toolkit-4.1.0-py3-none-any.whl
Size 89.4 kB
Tags Python 3
SHA-256 checksum
How to use checksums
47596b2d02119745519294c6e0b08507af4dc25d69fc9c68306972808eb68231
BLAKE2b-256 checksum
How to use checksums
b094bccff418f18adab01d3c90d096ac7a78c6fcc85eaf1df0f8c67a6d1aab64
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via RestSharp/106.13.0.0

Release history Release notifications | RSS feed

This release

4.1.0 This release

2 release files

4.0.0

2 release files

3.7.0

2 release files

3.6.0

2 release files

3.5.0

2 release files

3.4.0

2 release files

3.3.0

2 release files

3.2.2

2 release files

3.2.1

2 release files

3.2.0

2 release files

3.1.0

2 release files

3.0.2

2 release files

3.0.1

2 release files

3.0.0

2 release files

2.3.0

2 release files

2.1.0

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page