Skip to main content

Kevros Governance Middleware for Microsoft Agent Framework — cryptographic authorization, intent binding, and hash-chained provenance for AI agents.

This project has been archived.

The maintainers of this project have marked this project as archived. No new releases are expected.

Project description

Kevros Governance Middleware for Microsoft Agent Framework

Cryptographic authorization, intent binding, and hash-chained provenance for AI agents built on the Microsoft Agent Framework.

Install

pip install kevros-agent-framework

Quick Start

from kevros_agent_framework import (
    KevrosGovernanceMiddleware,
    KevrosFunctionMiddleware,
    KevrosConfig,
    KevrosGovernanceClient,
)
from agent_framework import Agent

# Configure -- API key auto-provisions on first use if omitted
config = KevrosConfig(api_key="kvrs_...")
client = KevrosGovernanceClient(config)

# Attach both middleware types, sharing a single client
agent = Agent(
    client=chat_client,
    name="governed-assistant",
    instructions="You are a helpful assistant.",
    middleware=[
        KevrosGovernanceMiddleware(config=config, client=client),
        KevrosFunctionMiddleware(config=config, client=client),
    ],
)

What It Does

Every agent invocation and tool call is cryptographically governed:

  • Precision decisioning -- Each agent run is verified against governance policy (ALLOW / CLAMP / DENY) with an HMAC-signed release token
  • Intent binding -- Each function call gets a cryptographic intent-to-command binding before execution
  • Hash-chained provenance -- Every decision is logged to an append-only, tamper-evident ledger

Comparison with Purview Policy Middleware

Aspect Purview Kevros
Purpose Content-level DLP (redact PII, block topics) Cryptographic authorization + audit evidence
Proof None (rule-based decision) HMAC release tokens, hash-chained provenance
Scope Message content filtering Action authorization, intent binding, provenance
Relationship Complementary Complementary

Use both: Purview for content safety, Kevros for authorization and evidence.

Links

License

BSL-1.1 -- See LICENSE for details.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

kevros_agent_framework-0.1.1.tar.gz (16.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

kevros_agent_framework-0.1.1-py3-none-any.whl (15.1 kB view details)

Uploaded Python 3

File details

Details for the file kevros_agent_framework-0.1.1.tar.gz.

File metadata

  • Download URL: kevros_agent_framework-0.1.1.tar.gz
  • Upload date:
  • Size: 16.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.3

File hashes

Hashes for kevros_agent_framework-0.1.1.tar.gz
Algorithm Hash digest
SHA256 ee01b98dacfdf3568418ada544d080a0da9dd86af7cf10966ba97778d8c40ebe
MD5 040611467fff63968ce3a1f14a9345e9
BLAKE2b-256 3715ad7c938b91aee66f56d7d82226e8e68610afd85816e591080c2c266d286b

See more details on using hashes here.

File details

Details for the file kevros_agent_framework-0.1.1-py3-none-any.whl.

File metadata

File hashes

Hashes for kevros_agent_framework-0.1.1-py3-none-any.whl
Algorithm Hash digest
SHA256 b005dfbf960710e5f42311f068b78194b60e34da2a050789f8e503193627a13d
MD5 bd16e89893d89328937269bef4e94fa4
BLAKE2b-256 a5ad10b61966ef10b8d984f8e5a97bccb4a1578af8ec7bd4e3d59165cc6e756d

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page