Skip to main content

Kevros Governance Middleware for Microsoft Agent Framework — cryptographic authorization, intent binding, and hash-chained provenance for AI agents.

This project has been archived.

The maintainers of this project have marked this project as archived. No new releases are expected.

Project description

Kevros Governance Middleware for Microsoft Agent Framework

Cryptographic authorization, intent binding, and hash-chained provenance for AI agents built on the Microsoft Agent Framework.

Install

pip install kevros-agent-framework

Quick Start

from kevros_agent_framework import (
    KevrosGovernanceMiddleware,
    KevrosFunctionMiddleware,
    KevrosConfig,
    KevrosGovernanceClient,
)
from agent_framework import Agent

# Configure -- API key auto-provisions on first use if omitted
config = KevrosConfig(api_key="kvrs_...")
client = KevrosGovernanceClient(config)

# Attach both middleware types, sharing a single client
agent = Agent(
    client=chat_client,
    name="governed-assistant",
    instructions="You are a helpful assistant.",
    middleware=[
        KevrosGovernanceMiddleware(config=config, client=client),
        KevrosFunctionMiddleware(config=config, client=client),
    ],
)

What It Does

Every agent invocation and tool call is cryptographically governed:

  • Precision decisioning -- Each agent run is verified against governance policy (ALLOW / CLAMP / DENY) with an HMAC-signed release token
  • Intent binding -- Each function call gets a cryptographic intent-to-command binding before execution
  • Hash-chained provenance -- Every decision is logged to an append-only, tamper-evident ledger

Comparison with Purview Policy Middleware

Aspect Purview Kevros
Purpose Content-level DLP (redact PII, block topics) Cryptographic authorization + audit evidence
Proof None (rule-based decision) HMAC release tokens, hash-chained provenance
Scope Message content filtering Action authorization, intent binding, provenance
Relationship Complementary Complementary

Use both: Purview for content safety, Kevros for authorization and evidence.

Links

License

BSL-1.1 -- See LICENSE for details.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

kevros_agent_framework-0.1.3.tar.gz (16.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

kevros_agent_framework-0.1.3-py3-none-any.whl (15.1 kB view details)

Uploaded Python 3

File details

Details for the file kevros_agent_framework-0.1.3.tar.gz.

File metadata

  • Download URL: kevros_agent_framework-0.1.3.tar.gz
  • Upload date:
  • Size: 16.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for kevros_agent_framework-0.1.3.tar.gz
Algorithm Hash digest
SHA256 de6e5ae63038de96e589751ac50ecb4cde9755b7f20e3660cb0f663a77c16545
MD5 19c7e45bc79024f1845548a68693c695
BLAKE2b-256 1f6a1e6a423f4a6516662402ec1a5febdf85fedfe19f4b3b657f4897fb44a480

See more details on using hashes here.

Provenance

The following attestation bundles were made for kevros_agent_framework-0.1.3.tar.gz:

Publisher: publish-sdk.yml on ndl-systems/kevros

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file kevros_agent_framework-0.1.3-py3-none-any.whl.

File metadata

File hashes

Hashes for kevros_agent_framework-0.1.3-py3-none-any.whl
Algorithm Hash digest
SHA256 a5c6054abfc220ec3edd93f2847ce9f0e6d4372b885d26fcecfc7a91d81106ef
MD5 68f10ec156aee9110fc8f43f5190ba1b
BLAKE2b-256 995a6908310a2ecd3989948c73a1cd81319161e74289781ae31918ed272a7367

See more details on using hashes here.

Provenance

The following attestation bundles were made for kevros_agent_framework-0.1.3-py3-none-any.whl:

Publisher: publish-sdk.yml on ndl-systems/kevros

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page