microsoft/agent-governance-toolkit

View on GitHub

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

Stars: 6.3k
Forks: 1.1k
Open beginner issues: 0
Indexed issues: 78
Avg merge: 5d 11h
Merged PRs (30d): 142

Dominant language: Python
License: MIT
Last GitHub push: Sep 19, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted good first issue

Beginner friendly Everything

Open All

78 open issues indexed

agent-governance-toolkit-core[migrate] extra pins an unresolvable agt-policies range Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

microsoft/agent-governance-toolkit#4019 · Opened Sep 17, 2026
[Bug] OpenCode and Antigravity emit Content-Length frames; Antigravity cannot read NDJSON Open

bug needs-review:HIGH triage

Difficulty 4/5 3-5 days Newbie friendliness 48/100

microsoft/agent-governance-toolkit#4012 · 1 comment · Opened Sep 16, 2026
[Bug]: Compliance reports conflate unassessed controls with satisfied controls Open

bug needs-review:MEDIUM triage

Difficulty 5/5 Over a week Newbie friendliness 35/100

microsoft/agent-governance-toolkit#3957 · 1 comment · Opened Sep 14, 2026
policy-engine: manifest_from_url does not re-validate redirect hops or hostnames Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/agent-governance-toolkit#3948 · Opened Sep 13, 2026
policy-engine: URL-sourced manifests may declare local bundle and data paths Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

microsoft/agent-governance-toolkit#3947 · Opened Sep 13, 2026
policy-engine: core shim version 0.3.1-beta.0 collides with the old embedded engine already on crates.io Open

Difficulty 1/5 Under an hour Newbie friendliness 88/100

microsoft/agent-governance-toolkit#3946 · Opened Sep 13, 2026
policy-engine: FFI test coverage dropped from 15 Rust tests to 1 after the retarget Open

Difficulty 4/5 3-5 days Newbie friendliness 68/100

microsoft/agent-governance-toolkit#3943 · Opened Sep 13, 2026
policy-engine: AgentControl::new(runtime) leaves parts=None, making with_telemetry a no-op and revalidating against Limits::default Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

microsoft/agent-governance-toolkit#3941 · Opened Sep 13, 2026
RFC: define the verified approver assertion (MCP-SECURITY-GATEWAY-1.0 §4.3 and ADR-0030) Open

triage

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/agent-governance-toolkit#3918 · 1 comment · Opened Sep 9, 2026
BackendRegistry / OPAPolicyBackend / CedarPolicyBackend are never consulted by govern() - registering a backend is a silent no-op Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

microsoft/agent-governance-toolkit#3911 · 1 comment · Opened Sep 9, 2026
AGT Studio: package + CI scaffold + CODEOWNERS (Epic 1a, issue 5/32) Open

agent-governance architecture ci/cd enhancement

Difficulty 5/5 Over a week Newbie friendliness 38/100

microsoft/agent-governance-toolkit#3898 · 1 comment · Opened Sep 7, 2026
Governance-layer gap suggestions: SBOM / context integrity / human-approval middleware Open

needs-review:HIGH

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/agent-governance-toolkit#3892 · 2 comments · Opened Sep 7, 2026
#310 was closed as completed, but no Windows test job exists in .github/workflows Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

microsoft/agent-governance-toolkit#3884 · 1 comment · Opened Sep 3, 2026
claude-code: allow policies to configure the hardcoded guard context preamble Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/agent-governance-toolkit#3836 · Opened Aug 25, 2026
rag-governance content_scanner SSN pattern misses cued and space-separated forms Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

microsoft/agent-governance-toolkit#3815 · 1 comment · Opened Aug 25, 2026
docs: stable per-control anchors in compliance mappings so external standards can deep link Open

needs-review:HIGH

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

microsoft/agent-governance-toolkit#3811 · 1 comment · Opened Aug 24, 2026
[Feature]: define Web-standard edge-runtime conformance for TypeScript policy enforcement Open

enhancement needs-review:MEDIUM triage

Difficulty 5/5 Over a week Newbie friendliness 48/100

microsoft/agent-governance-toolkit#3808 · 1 comment · Opened Aug 24, 2026
verifiable-compliance-receipts: does the signer key need to be independent of the acting agent? Open

needs-review:HIGH

Difficulty 5/5 Over a week Newbie friendliness 35/100

microsoft/agent-governance-toolkit#3805 · 31 comments · Opened Aug 22, 2026
[Feature]: Re-integrate Cedarling through the ACS v5 policy extension point Open

enhancement triage

Difficulty 5/5 Over a week Newbie friendliness 45/100

microsoft/agent-governance-toolkit#3791 · 1 comment · 2 reactions · Opened Aug 20, 2026
supervisor.validate_hierarchy is O(max_level): a huge integer level hangs validation Open

Difficulty 3/5 1-2 days Newbie friendliness 74/100

microsoft/agent-governance-toolkit#3788 · Opened Aug 19, 2026
Introduce an IResponseSanitizer seam so MCP response sanitization can be replaced or extended Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

microsoft/agent-governance-toolkit#3776 · Opened Aug 18, 2026
Add an async evaluation path to PolicyEngine so external backends aren't forced into sync-over-async Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

microsoft/agent-governance-toolkit#3775 · 1 comment · Opened Aug 18, 2026
[Bug]: Tutorial 14 and test_total_handoffs_always_zero assert an obsolete no-handoff contract Open

needs-review:MEDIUM

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

microsoft/agent-governance-toolkit#3742 · 1 comment · Opened Aug 16, 2026
CONTRIBUTING's `pip install -e "agent-mesh[dev]"` cannot resolve: agent_hypervisor>=5.0.0 is not on PyPI Open

needs-review:MEDIUM

Difficulty 1/5 Under an hour Newbie friendliness 78/100

microsoft/agent-governance-toolkit#3733 · 1 comment · Opened Aug 14, 2026
[Feature]: Add Strands Agents framework integration Open

enhancement triage

Difficulty 4/5 3-5 days Newbie friendliness 55/100

microsoft/agent-governance-toolkit#3730 · 1 comment · Opened Aug 14, 2026
[Feature]: add out-of-band activation evidence for OpenCode governance Open

needs-review:MEDIUM

Difficulty 5/5 Over a week Newbie friendliness 45/100

microsoft/agent-governance-toolkit#3708 · 1 comment · Opened Aug 11, 2026
[Bug]: OpenCode workspace install uses an undiscoverable .mjs shim and stale hook documentation Open

needs-review:MEDIUM

Difficulty 4/5 3-5 days Newbie friendliness 52/100

microsoft/agent-governance-toolkit#3707 · 2 comments · Opened Aug 11, 2026
RFC: Rust SDK production parity — governed data plane, workflow enforcement, and native integrations Open

needs-review:MEDIUM

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/agent-governance-toolkit#3680 · 2 comments · Opened Aug 10, 2026
[Security]: upgrade js-yaml to 4.3.1 or remove it from the OpenCode path Open

needs-review:MEDIUM

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/agent-governance-toolkit#3671 · 1 comment · Opened Aug 10, 2026
[Feature]: optionally scrub hidden instruction carriers from tool output Open

needs-review:MEDIUM

Difficulty 4/5 3-5 days Newbie friendliness 48/100

microsoft/agent-governance-toolkit#3670 · 1 comment · Opened Aug 10, 2026
[Feature]: expose session-scoped state and staged evaluation in OpenCode Open

needs-review:MEDIUM

Difficulty 5/5 Over a week Newbie friendliness 38/100

microsoft/agent-governance-toolkit#3669 · 1 comment · Opened Aug 10, 2026
[Feature]: enrich audit entries with reason, argument digest, and principal Open

needs-review:MEDIUM

Difficulty 5/5 Over a week Newbie friendliness 35/100

microsoft/agent-governance-toolkit#3668 · 2 comments · Opened Aug 10, 2026
[Feature]: make secret patterns configurable and add common token formats Open

needs-review:MEDIUM

Difficulty 4/5 3-5 days Newbie friendliness 55/100

microsoft/agent-governance-toolkit#3667 · 1 comment · Opened Aug 10, 2026
[Bug]: promptDefenseGrade does not reflect operator configuration Open

needs-review:MEDIUM

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/agent-governance-toolkit#3664 · 1 comment · Opened Aug 10, 2026
[Bug]: OpenCode default policy can permit recursive deletion and review is non-blocking Open

needs-review:MEDIUM

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/agent-governance-toolkit#3662 · 4 comments · Opened Aug 10, 2026
[Bug]: lint-policy accepts a rule whose condition can never match, and the evaluator silently applies the default Open

bug triage

Difficulty 4/5 3-5 days Newbie friendliness 48/100

microsoft/agent-governance-toolkit#3661 · 5 comments · Opened Aug 10, 2026
RFC: verifiable residency across delegation chains (implements ADR-0008 problems 4 and 5) Open

needs-review:HIGH triage

Difficulty 5/5 Over a week Newbie friendliness 28/100

microsoft/agent-governance-toolkit#3658 · 2 comments · Opened Aug 10, 2026
Dependabot cannot update the .github/ci/actions.toml pin registry: every actions major needs a manual sync commit Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

microsoft/agent-governance-toolkit#3638 · Opened Aug 5, 2026
RFC: Preserve Microsoft Agent Framework execution identity in AGT governance evidence Open

triage

Difficulty 5/5 Over a week Newbie friendliness 35/100

microsoft/agent-governance-toolkit#3613 · Opened Aug 4, 2026
Context-cued bare SSNs evade both the redactor and adapter SSN detectors Open

Difficulty 3/5 1-2 days Newbie friendliness 74/100

microsoft/agent-governance-toolkit#3592 · 1 comment · Opened Aug 3, 2026
contributor_check and credential_audit have diverged into two copies; CI runs the one without retry, the packaged one lacks all hardening Open

needs-review:MEDIUM

Difficulty 5/5 Over a week Newbie friendliness 35/100

microsoft/agent-governance-toolkit#3571 · 2 comments · Opened Aug 1, 2026
PII detection regexes scale quadratically on digit-heavy input Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

microsoft/agent-governance-toolkit#3566 · 1 comment · Opened Aug 1, 2026
Validate PR title fails on every recreated dependabot PR (capitalized Bump/Update) Open

Difficulty 3/5 1-2 days Newbie friendliness 65/100

microsoft/agent-governance-toolkit#3559 · Opened Jul 31, 2026
Example manifests: 32 of 42 still leave adapter-evaluated intervention points unbound (post-#3528) Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

microsoft/agent-governance-toolkit#3540 · Opened Jul 31, 2026
Policy loading: directory loaders drop invalid policies and continue; schema lint/save gate misses scope validation Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

microsoft/agent-governance-toolkit#3538 · 1 comment · Opened Jul 31, 2026
Unpinned/deprecated codeql-action references in emitted CI YAML and tutorials Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

microsoft/agent-governance-toolkit#3535 · Opened Jul 30, 2026
AgentMesh relay: connect-frame DID proof-of-possession is replayable within its 5-minute window Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

microsoft/agent-governance-toolkit#3525 · 1 comment · Opened Jul 30, 2026
normalize.rs: nested encodings decode in only one order (Rust twin of #3502) Open

needs-review:HIGH

Difficulty 3/5 1-2 days Newbie friendliness 68/100

microsoft/agent-governance-toolkit#3521 · 2 comments · Opened Jul 30, 2026
cross-SDK pattern: approval webhook URL validation is literal-hostname / construction-time only (DNS rebinding); Go PoC exploited end-to-end Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

microsoft/agent-governance-toolkit#3516 · Opened Jul 30, 2026
Follow-ups from #3510/#3512 reviews: registration-time hierarchy enforcement and require_tls empty-URL lint Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

microsoft/agent-governance-toolkit#3513 · Opened Jul 30, 2026

microsoft/agent-governance-toolkit

Get new issues in your inbox