Skip to main content

Kevros Governance Middleware for Microsoft Agent Framework — cryptographic authorization, intent binding, and hash-chained provenance for AI agents.

This project has been archived.

The maintainers of this project have marked this project as archived. No new releases are expected.

Project description

Kevros Governance Middleware for Microsoft Agent Framework

Cryptographic authorization, intent binding, and hash-chained provenance for AI agents built on the Microsoft Agent Framework.

Install

pip install kevros-agent-framework

Quick Start

from kevros_agent_framework import (
    KevrosGovernanceMiddleware,
    KevrosFunctionMiddleware,
    KevrosConfig,
    KevrosGovernanceClient,
)
from agent_framework import Agent

# Configure -- API key auto-provisions on first use if omitted
config = KevrosConfig(api_key="kvrs_...")
client = KevrosGovernanceClient(config)

# Attach both middleware types, sharing a single client
agent = Agent(
    client=chat_client,
    name="governed-assistant",
    instructions="You are a helpful assistant.",
    middleware=[
        KevrosGovernanceMiddleware(config=config, client=client),
        KevrosFunctionMiddleware(config=config, client=client),
    ],
)

What It Does

Every agent invocation and tool call is cryptographically governed:

  • Precision decisioning -- Each agent run is verified against governance policy (ALLOW / CLAMP / DENY) with an HMAC-signed release token
  • Intent binding -- Each function call gets a cryptographic intent-to-command binding before execution
  • Hash-chained provenance -- Every decision is logged to an append-only, tamper-evident ledger

Comparison with Purview Policy Middleware

Aspect Purview Kevros
Purpose Content-level DLP (redact PII, block topics) Cryptographic authorization + audit evidence
Proof None (rule-based decision) HMAC release tokens, hash-chained provenance
Scope Message content filtering Action authorization, intent binding, provenance
Relationship Complementary Complementary

Use both: Purview for content safety, Kevros for authorization and evidence.

Links

License

BSL-1.1 -- See LICENSE for details.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

kevros_agent_framework-0.1.2.tar.gz (16.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

kevros_agent_framework-0.1.2-py3-none-any.whl (15.1 kB view details)

Uploaded Python 3

File details

Details for the file kevros_agent_framework-0.1.2.tar.gz.

File metadata

  • Download URL: kevros_agent_framework-0.1.2.tar.gz
  • Upload date:
  • Size: 16.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for kevros_agent_framework-0.1.2.tar.gz
Algorithm Hash digest
SHA256 f1df65074f1a934a1d5a52e74cc31ceab6dbd2c0f5d037ab18465af8fca32bc3
MD5 627770c97e1e8daf21961b0f48fe4955
BLAKE2b-256 545457b33963e931d160baa8cc32fa0f4a07a3f3bc61c52cd95a2a95ddb353b0

See more details on using hashes here.

Provenance

The following attestation bundles were made for kevros_agent_framework-0.1.2.tar.gz:

Publisher: publish-sdk.yml on ndl-systems/kevros

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file kevros_agent_framework-0.1.2-py3-none-any.whl.

File metadata

File hashes

Hashes for kevros_agent_framework-0.1.2-py3-none-any.whl
Algorithm Hash digest
SHA256 b24c469161ecd8a0b8a92699f3426015cdfe40f28abc5a8f060199df23fa41fc
MD5 7ab7839edddeb0a3eaa5fc3e3873722a
BLAKE2b-256 ada0cc6e762f1abf30f6b2c2a3349215231fd5473c9b4b0f1578a763d3d6a0cb

See more details on using hashes here.

Provenance

The following attestation bundles were made for kevros_agent_framework-0.1.2-py3-none-any.whl:

Publisher: publish-sdk.yml on ndl-systems/kevros

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page