# Microsoft Agent Governance Toolkit — Runtime Security for AI Agents

> The first open-source toolkit to address all 10 OWASP Agentic AI security risks with deterministic policy enforcement.

- Org: Microsoft
- Date: 2026-04-02
- Category: tool, repo
- Source: https://github.com/microsoft/agent-governance-toolkit
- Canonical page: https://ai-tldr.dev/releases/microsoft-agent-governance-toolkit/

## In short

Microsoft open-sources a runtime security toolkit for AI agents that addresses all 10 OWASP Agentic AI risks with sub-millisecond policy enforcement, zero-trust identity, and execution sandboxing. MIT licensed with 1k+ stars.

## What it is

The Agent Governance Toolkit is Microsoft's open-source runtime security framework for autonomous AI agents. It provides seven packages: Agent OS (policy engine), Agent Mesh (cryptographic identity), Agent Runtime (execution sandboxing), Agent SRE (observability), Agent Compliance (regulatory mapping), Agent Marketplace (plugin lifecycle), and Agent Lightning (RL governance).

## How it works

The toolkit intercepts agent actions at sub-millisecond latency (0.012ms per rule) and evaluates them against policies written in YAML, OPA Rego, or Cedar. It enforces zero-trust identity using Ed25519 and quantum-safe ML-DSA-65 credentials with trust scoring. Execution sandboxing uses 4-tier privilege rings with saga orchestration and kill switches. Integrates with LangChain, CrewAI, AutoGen, and 20+ other frameworks.

## Why it matters

As AI agents gain autonomy and access to real-world systems, security becomes critical. This is the first comprehensive toolkit addressing all OWASP Agentic Top 10 risks (prompt injection, excessive agency, improper output handling, etc.) with production-grade performance. The MCP Security Scanner specifically detects tool poisoning and typosquatting attacks.

## Who it's for

Teams deploying AI agents in production who need security, compliance, and observability.

## Try it

pip install agent-governance-toolkit[full]

## Links

- [GitHub](https://github.com/microsoft/agent-governance-toolkit)
- [Announcement](https://opensource.microsoft.com/blog/2026/04/02/introducing-the-agent-governance-toolkit-open-source-runtime-security-for-ai-agents/)