agent_governance_toolkit 3.0.0

Public Preview — Unified installer and runtime policy enforcement for the Agent Governance Toolkit

Agent Governance

Unified installer and runtime policy enforcement for the Agent Governance Toolkit

One install for the complete governance stack — kernel · trust mesh · runtime supervisor · reliability engineering

[!IMPORTANT] Public Preview — The agent-governance-toolkit package on PyPI is a Microsoft-signed public preview release. APIs may change before GA.

pip install agent-governance-toolkit[full]

Architecture • Quick Start • Components • Why Unified? • Ecosystem • OWASP Compliance • Traction

⭐ If this project helps you, please star it! It helps others discover the agent governance stack.

🔗 Part of the Agent Governance Ecosystem — Installs Agent OS · AgentMesh · Agent Runtime · Agent SRE

Migrating from ai-agent-compliance? The package has been renamed to agent-governance-toolkit. Run pip install agent-governance — the old name is deprecated and will redirect here for 6 months.

---

Architecture

┌─────────────────────────────────────────────────────────────────┐
│                      agent-governance                            │
│                  pip install agent-governance-toolkit[full]              │
├─────────────────────────────────────────────────────────────────┤
│                                                                 │
│   ┌───────────────────┐      ┌───────────────────────────┐     │
│   │   Agent OS Kernel │◄────►│   AgentMesh Platform      │     │
│   │                   │      │                           │     │
│   │  Policy Engine    │      │  Zero-Trust Identity      │     │
│   │  Capability Model │      │  Mutual TLS for Agents    │     │
│   │  Audit Logging    │      │  Encrypted Channels       │     │
│   │  Syscall Layer    │      │  Trust Scoring             │     │
│   └────────┬──────────┘      └─────────────┬─────────────┘     │
│            │                               │                   │
│            ▼                               ▼                   │
│   ┌───────────────────┐      ┌───────────────────────────┐     │
│   │ Agent Runtime     │      │   Agent SRE               │     │
│   │                   │      │                           │     │
│   │  Execution Rings  │      │  Health Monitoring        │     │
│   │  Resource Limits  │      │  SLO Enforcement          │     │
│   │  Runtime Sandboxing│     │  Incident Response        │     │
│   │  Kill Switch      │      │  Chaos Engineering        │     │
│   └───────────────────┘      └───────────────────────────┘     │
│                                                                 │
└─────────────────────────────────────────────────────────────────┘

---

Quick Start

import asyncio
from agent_os import StatelessKernel, ExecutionContext
from agentmesh import AgentIdentity

# Boot the governance kernel
kernel = StatelessKernel()
ctx = ExecutionContext(agent_id="my-agent", policies=["read_only"])

# Establish zero-trust agent identity
identity = AgentIdentity.create(
    name="my-agent",
    sponsor="[e-mail]",
    capabilities=["read:data", "write:reports"],
)

# Execute a governed action
async def main():
    result = await kernel.execute(
        action="database_query",
        params={"query": "SELECT * FROM users"},
        context=ctx,
    )
    print(f"Success: {result.success}, Data: {result.data}")

asyncio.run(main())

Compliance Grading

Check your governance coverage with a compliance grade:

from agent_compliance.verify import GovernanceVerifier

verifier = GovernanceVerifier()
attestation = verifier.verify()
print(f"Grade: {attestation.compliance_grade()}")  # A, B, C, D, or F
print(f"Coverage: {attestation.coverage_pct()}%")
print(attestation.badge_markdown())

Install only what you need:

# Core: kernel + trust mesh
pip install agent-governance-toolkit

# Full stack: adds runtime + SRE
pip install agent-governance-toolkit[full]

# À la carte
pip install agent-governance-toolkit[runtime]
pip install agent-governance-toolkit[sre]

---

Components

Package	Role
Agent OS	Policy engine — deterministic action evaluation
AgentMesh	Trust infrastructure — identity, credentials, protocol bridges
Agent Runtime	Execution supervisor — rings, sessions, sagas
Agent SRE	Reliability — SLOs, circuit breakers, chaos testing
Agent Compliance	Regulatory compliance — GDPR, HIPAA, SOX frameworks (this package)
Agent Marketplace	Plugin lifecycle — discover, install, verify, sign
Agent Lightning	RL training governance — governed runners, policy rewards

Star the ecosystem

        

---

Why a Unified Governance Stack?

Running AI agents in production without governance is like deploying microservices without TLS, RBAC, or monitoring. Each layer solves a different problem:

Concern	Without Governance	With Agent Governance
Security	Agents call any tool, access any resource	Capability-based permissions, policy enforcement
Trust	No identity verification between agents	Mutual TLS, trust scores, encrypted channels
Control	Runaway agents consume unbounded resources	Execution rings, resource limits, kill switches
Reliability	Silent failures, no observability	SLO enforcement, health checks, incident automation
Compliance	No audit trail for agent decisions	Immutable audit logs, decision lineage tracking

One install. Four layers of protection.

The meta-package ensures all components are version-compatible and properly integrated. No dependency conflicts, no version mismatches — just a single pip install to go from zero to production-grade agent governance.

---

The Agent Governance Ecosystem

agent-governance ─── The meta-package (you are here)
├── agent-os-kernel ─── Governance kernel
├── agentmesh-platform ─── Zero-trust mesh
├── agentmesh-runtime ─── Runtime supervisor (optional)
└── agent-sre ─── Reliability engineering (optional)

Each component works standalone, but they're designed to work together. The kernel enforces policy, the mesh secures communication, the runtime controls execution, and SRE keeps everything running.

---

Examples

See the examples/ directory for runnable demos:

# Quick start — boot the governance stack in 30 lines
python examples/quickstart.py

# Full stack — all 4 layers working together
python examples/governed_agent.py

---

Framework Integration

# LangChain
pip install langchain agent-governance

# CrewAI
pip install crewai agent-governance

# AutoGen
pip install pyautogen agent-governance

---

🗺️ Roadmap

Quarter	Milestone
Q1 2026	✅ Unified meta-package, 4 components integrated, PyPI published
Q2 2026	Cross-component integration tests, unified CLI, dashboard UI
Q3 2026	Helm chart for Kubernetes, managed cloud preview
Q4 2026	SOC2 Type II certification, enterprise support tier

---

🛡️ OWASP Agentic Top 10 Coverage

The agent governance stack covers 10 of 10 risks from the OWASP Top 10 for Agentic Applications (2026):

OWASP Risk	Coverage	Component
Agent Goal Hijack	✅	Agent OS — Policy Engine
Tool Misuse	✅	Agent OS — Capability Sandboxing
Identity & Privilege Abuse	✅	AgentMesh — DID Identity
Supply Chain Vulnerabilities	✅	AgentMesh — AI-BOM v2.0
Unexpected Code Execution	✅	Agent Runtime — Execution Rings
Memory & Context Poisoning	✅	Agent OS — VFS + CMVK
Insecure Inter-Agent Communication	✅	AgentMesh — IATP Protocol
Cascading Failures	✅	Agent SRE — Circuit Breakers
Human-Agent Trust Exploitation	✅	Agent OS — Approval Workflows
Rogue Agents	✅	Agent Runtime — Kill Switch

→ Full OWASP compliance mapping with code examples

---

📈 Traction

The ecosystem is growing — 3,000+ views, 9,400+ clones, and 1,278 unique developers in the last 14 days alone. Traffic from Medium, Reddit, LinkedIn, Google, and even ChatGPT.

→ See full traction report

---

Contributing

We welcome contributions! See our Contributing Guide for details.

For component-specific contributions, see:

• Agent OS
• AgentMesh
• Agent Runtime
• Agent SRE

License

MIT — see LICENSE for details.

---

github.com/microsoft/agent-governance-toolkit · Documentation · GitHub

Building the governance layer for the agentic era