{"repo":"microsoft/agent-governance-toolkit","free":true,"listed":false,"github":"https://github.com/microsoft/agent-governance-toolkit","clone":"git clone https://github.com/microsoft/agent-governance-toolkit.git","description":"AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.","language":"Python","stars":5972,"topics":["agent-framework","ai-agents","ai-safety","compliance","governance","microsoft","owasp","policy-engine","python","security"],"license":"MIT","category":"ai-agents","readme_excerpt":"🌍 English 日本語 简体中文 한국어 Agent Governance Toolkit Ship agents to production without losing sleep 🚀 Quick Start · 📋 Specifications · 📦 PyPI · 📝 Changelog -brightgreen) [!IMPORTANT] Public Preview -- production-quality public preview releases. May have breaking changes before GA. Policy enforcement, identity, sandboxing, and SRE for autonomous AI agents. One pip install , any framework. --- The Problem Your AI agents call tools, browse the web, query databases, and delegate to other agents. Once deployed, they make decisions autonomously. You need answers to three questions: 1. Is this action allowed? An agent with access to send email and query database should not be able to drop table . OAuth scopes and IAM roles control which services an agent can reach, not what it does once connected. 2. Which agent did this? In a multi-agent system, five agents might share a single API key. When something goes wrong, \"an agent did it\" is not an incident response. 3. Can you prove what happened? Auditors and regulators need tamper-evident records of every decision: what policy was active, what the agent requested, and why it was allowed or denied. Prompt-level safety (\"please follow the rules\") is not a control surface. It is a polite request to a stochastic system. OWASP LLM01:2025 states this explicitly: \"it is unclear if there are fool-proof methods of prevention for prompt injection.\" The published numbers back this up. Andriushchenko et al. (ICLR 2025) report 100% attack success ra","default_branch":null,"files":null,"tree":[],"storefront":"/r/microsoft","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/microsoft/agent-governance-toolkit/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}