Kevros Governance Middleware for Microsoft Agent Framework — cryptographic authorization, intent binding, and hash-chained provenance for AI agents.
This project has been archived.
The maintainers of this project have marked this project as archived. No new releases are expected.
Project description
Kevros Governance Middleware for Microsoft Agent Framework
Cryptographic authorization, intent binding, and hash-chained provenance for AI agents built on the Microsoft Agent Framework.
Install
pip install kevros-agent-framework
Quick Start
from kevros_agent_framework import (
KevrosGovernanceMiddleware,
KevrosFunctionMiddleware,
KevrosConfig,
KevrosGovernanceClient,
)
from agent_framework import Agent
# Configure -- API key auto-provisions on first use if omitted
config = KevrosConfig(api_key="kvrs_...")
client = KevrosGovernanceClient(config)
# Attach both middleware types, sharing a single client
agent = Agent(
client=chat_client,
name="governed-assistant",
instructions="You are a helpful assistant.",
middleware=[
KevrosGovernanceMiddleware(config=config, client=client),
KevrosFunctionMiddleware(config=config, client=client),
],
)
What It Does
Every agent invocation and tool call is cryptographically governed:
- Precision decisioning -- Each agent run is verified against governance policy (ALLOW / CLAMP / DENY) with an HMAC-signed release token
- Intent binding -- Each function call gets a cryptographic intent-to-command binding before execution
- Hash-chained provenance -- Every decision is logged to an append-only, tamper-evident ledger
Comparison with Purview Policy Middleware
| Aspect | Purview | Kevros |
|---|---|---|
| Purpose | Content-level DLP (redact PII, block topics) | Cryptographic authorization + audit evidence |
| Proof | None (rule-based decision) | HMAC release tokens, hash-chained provenance |
| Scope | Message content filtering | Action authorization, intent binding, provenance |
| Relationship | Complementary | Complementary |
Use both: Purview for content safety, Kevros for authorization and evidence.
Links
License
BSL-1.1 -- See LICENSE for details.
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file kevros_agent_framework-0.1.1.tar.gz.
File metadata
- Download URL: kevros_agent_framework-0.1.1.tar.gz
- Upload date:
- Size: 16.4 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.12.3
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
ee01b98dacfdf3568418ada544d080a0da9dd86af7cf10966ba97778d8c40ebe
|
|
| MD5 |
040611467fff63968ce3a1f14a9345e9
|
|
| BLAKE2b-256 |
3715ad7c938b91aee66f56d7d82226e8e68610afd85816e591080c2c266d286b
|
File details
Details for the file kevros_agent_framework-0.1.1-py3-none-any.whl.
File metadata
- Download URL: kevros_agent_framework-0.1.1-py3-none-any.whl
- Upload date:
- Size: 15.1 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.12.3
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
b005dfbf960710e5f42311f068b78194b60e34da2a050789f8e503193627a13d
|
|
| MD5 |
bd16e89893d89328937269bef4e94fa4
|
|
| BLAKE2b-256 |
a5ad10b61966ef10b8d984f8e5a97bccb4a1578af8ec7bd4e3d59165cc6e756d
|