microsoft/agent-governance-toolkit
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
What it solves
它解决了自主 AI 代理执行未授权或破坏性行为的风险。由于提示层面的安全是概率性的，且容易受到注入攻击，这套工具包提供一个确定性的执行层，在工具调用和消息执行之前拦截，使未授权行为在结构上变得不可能，而不仅仅是可能性低。
How it works
该工具包充当 AI 代理与其工具之间的治理内核。它使用策略引擎（支持 YAML、OPA 和 Cedar）来评估每个请求的操作是否符合规则。若操作被允许则继续；若被拒绝则抛出 GovernanceDenied 错误。系统还集成身份管理（SPIFFE/DID）和防篡改审计日志，精准记录是哪位代理执行了哪项操作以及为何被允许。
Who it’s for
需要将自主代理投入生产的开发者和 SRE，必须要有严格的策略执行、合规监管（如 OWASP Agentic Top 10）以及在多代理系统中提供详细审计能力。
Highlights
- Multi-Language Support: SDKs available for Python, TypeScript, .NET, Rust, and Go.
- Framework Agnostic: Integrates with major frameworks including Semantic Kernel, AutoGen, LangGraph, CrewAI, and OpenAI Agents SDK.
- Deterministic Enforcement: Moves safety from the prompt layer to the application code layer to prevent prompt injection bypasses.
- Comprehensive Tooling: Includes a CLI for OWASP compliance checks, policy linting, and prompt injection auditing.
- Advanced Governance: Features like execution sandboxing (privilege rings), a kill switch, and an MCP Security Gateway for tool poisoning detection.