{"id":"microsoft-agent-governance-toolkit--gh-microsoft-agent-governance-toolkit","name":"Microsoft Agent Governance Toolkit","url":"https://github.com/microsoft/agent-governance-toolkit","page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/microsoft-agent-governance-toolkit--gh-microsoft-agent-governance-toolkit","family":"memory","section":"Memory governance, privacy & safety","sections":["Memory governance, privacy & safety"],"tier":2,"last_verified_at":"2026-10-22","lifecycle":{"status":"active","severity":0,"note":null},"taxonomy":{"storage":[{"value":"append-only","primary":true,"reason":"append-only audit log (hash-chained) + cryptographic identity store (Ed25519/SPIFFE certs) + policy definitions (YAML/JSON/OPA Rego/Cedar); not user-memory store"}],"retrieval":[{"value":"agentic","primary":true,"reason":null}],"persistence":[{"value":"session","primary":true,"reason":null}],"update":[{"value":"read-only","primary":true,"reason":null}],"unit":[{"value":"policy","primary":true,"reason":"policy / audit log entry / agent identity / trust score (0–1000) — not user memory"}],"governance":[{"value":"auditable","primary":true,"reason":null}],"conflict":[{"value":"llm-arbitrate","primary":true,"reason":"LLM-arbitrate (CMVK majority-vote before memory-influenced action)"}]},"cells":{"type":{"value":"Cross-Model Verification Kernel + Agent OS","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"desc":{"value":"Cross-Model Verification Kernel (CMVK) requires majority-voting agreement across multiple model calls before a memory-influenced action. Agent OS package intercepts every action (memory included) at sub-millisecond latency. MIT licensed.","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"claims":{"value":"p99 < 0.1ms. Integrations for LangChain, CrewAI, Google ADK, Microsoft Agent Framework. Python / TypeScript / Rust / Go / .NET. April 2026.","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"modalities":{"value":"text","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"created":{"value":"2026-03","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","last_verified_at":"2026-05-12","source_class":"repo"},"latest-release":{"value":"v4.1.0 (2026-06-11)","citation":"https://pypi.org/project/agent-governance-toolkit/","status":"real-data","tier":"T2","last_verified_at":"2026-10-22","source_class":"registry"},"license":{"value":"MIT","citation":"https://github.com/microsoft/agent-governance-toolkit/blob/main/LICENSE","status":"real-data","tier":"T1","source_class":"repo"},"gh":{"value":"microsoft/agent-governance-toolkit — ~6.1k stars","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","last_verified_at":"2026-10-22","source_class":"repo"},"mindshare":{"value":"1.4k GitHub stars (+50/mo); growing signal for enterprise governance tooling","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","last_verified_at":"2026-05-12","source_class":"repo"},"citations":{"value":"not applicable — not academic","citation":null,"status":"not-applicable","tier":"T3","last_verified_at":"2026-05-12"},"funding":{"value":"not applicable — Microsoft Research; no external funding","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","last_verified_at":"2026-05-12","source_class":"repo"},"customers":{"value":"searched not found","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"depth-floor-reached","tier":"T1","source_class":"repo"},"pricing":{"value":"free / open source (MIT)","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"compliance":{"value":"MIT-licensed tooling; Microsoft Azure enterprise compliance stack available separately","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"data-handling":{"value":"local enforcement (sub-millisecond p99 action interception); no mandatory cloud dependency","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"deployment":{"value":"library/SDK integration; multi-language (Python TypeScript Rust Go .NET); LangChain/CrewAI/Google ADK integrations","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"hq":{"value":"not applicable — Microsoft Corporation (Redmond WA)","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"founders":{"value":"Microsoft Research","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"volume":{"value":"internal — undisclosed (enterprise toolkit)","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"perf":{"value":"no public benchmark scores found — vendor does not publish quantitative perf metrics","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"repro":{"value":"not applicable — not a research paper","citation":null,"status":"not-applicable","tier":"T3"},"code-release":{"value":"not applicable — not a research paper","citation":null,"status":"not-applicable","tier":"T3"},"api-surface":{"value":"REST, PowerShell","citation":"https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-agents","status":"real-data","tier":"T2","source_class":"vendor"},"latency":{"value":"not applicable — governance tool","citation":null,"status":"not-applicable","tier":"T3"},"throughput":{"value":"not applicable — governance tool","citation":null,"status":"not-applicable","tier":"T3"},"backend-storage":{"value":"custom (Microsoft 365)","citation":"https://learn.microsoft.com/en-us/microsoft-365/","status":"real-data","tier":"T2","source_class":"vendor"},"multi-tenancy":{"value":"hard-isolation","citation":"https://www.microsoft.com/en-us/trust-center","status":"real-data","tier":"T2","source_class":"vendor"},"encryption":{"value":"at-rest + in-transit","citation":"https://www.microsoft.com/en-us/trust-center","status":"real-data","tier":"T2","source_class":"vendor"},"sso-rbac":{"value":"SSO + RBAC","citation":"https://www.microsoft.com/en-us/trust-center","status":"real-data","tier":"T2","source_class":"vendor"},"embedding-model":{"value":"not applicable — governance tool","citation":null,"status":"not-applicable","tier":"T3"},"consistency":{"value":"not specified — vendor docs do not address this dimension","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"versioning":{"value":"none","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"tombstoning":{"value":"not applicable","citation":null,"status":"not-applicable","tier":"T3"},"schema-evolution":{"value":"not specified — vendor docs do not address this dimension","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"namespace":{"value":"not specified — vendor docs do not address this dimension","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"contradiction":{"value":"LLM resolves and overwrites","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"forgetting":{"value":"not applicable","citation":null,"status":"not-applicable","tier":"T3"},"mcp-support":{"value":"Yes — MCP Security Scanner (tool poisoning, typosquatting, hidden instructions); A2A/MCP Protocol Bridge in Agent Mesh","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"a2a-support":{"value":"Yes — Agent Mesh provides A2A/MCP/IATP protocol bridges (per agentmesh-platform docs); zero-trust identity + trust scoring","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"otel":{"value":"Yes — Telemetry package provides OpenTelemetry integration (per PACKAGE-FEATURE-MATRIX.md)","citation":"https://github.com/microsoft/agent-governance-toolkit/blob/main/docs/PACKAGE-FEATURE-MATRIX.md","status":"real-data","tier":"T1","source_class":"repo"},"webhooks":{"value":"no data — searched README, ARCHITECTURE.md, PACKAGE-FEATURE-MATRIX.md; webhook events not in feature matrix","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"depth-floor-reached","tier":"T1","source_class":"repo"},"import-export":{"value":"Yes — JSON export/import via AuditLogger (hash-chained audit events); identity.go supports JSON DID/JWK export/import","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"integration-count":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"orchestration":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"programmatic-control":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"vendor-benchmarks":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3","last_verified_at":"2026-05-06"},"pricing-specifics":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"agent-abstraction":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"memory-primitives":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"llm-lock":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"runtimes":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"session-handling":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"validated-verticals":{"value":"regulated enterprise: financial-services, healthcare, government, legal","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"time-to-running":{"value":"<1day to <1week (enterprise procurement + integration)","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"anti-fit":{"value":"not for hobbyist / non-production use cases","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"optimised-for":{"value":"governance + compliance + audit + adversarial hardening","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"adjacent-infrastructure":{"value":"BYO agent stack; this layer guards it","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"pros":{"value":"Microsoft's governance toolkit for AI agents — covers memory access policies + audit trails as part of broader agent governance.","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"cons":{"value":"Microsoft-stack-tilted; less applicable outside M365 / Azure deployments.","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"links":{"value":"GitHub microsoft/agent-governance-toolkit","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"obs-langsmith":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"obs-opentelemetry":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"obs-datadog":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"obs-helicone":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"obs-weave":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"obs-langfuse":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"obs-arize":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"obs-custom":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"cost-token-budget":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"cost-prompt-caching":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"cost-semantic-caching":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"cost-batching":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"cost-model-routing":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"cost-streaming-only":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"cost-observability-cost-attribution":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"eval-langsmith-evals":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"eval-braintrust":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"eval-weights-and-biases-agent":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"eval-helicone-evals":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"eval-custom-test-harness":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"eval-human-loop":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"eval-production-traffic-replay":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"commit-trajectory":{"value":"[{\"ym\":\"2026-04\",\"cum\":967},{\"ym\":\"2026-05\",\"cum\":1490}]","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","last_verified_at":"2026-05-14","source_class":"repo"},"citation-trajectory":{"value":"not applicable — non-paper row","citation":null,"status":"not-applicable","tier":"T3","last_verified_at":"2026-05-14"},"download-trajectory":{"value":"not applicable — not published as a package","citation":null,"status":"not-applicable","tier":"T3","last_verified_at":"2026-05-14"},"cost-input-usd-per-mtok":{"value":"0","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"cost-output-usd-per-mtok":{"value":"0","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"cost-tier":{"value":"free","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"cost-pricing-model":{"value":"free-tier","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"cost-last-verified":{"value":"2026-06-29","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"capability-composite-score":{"value":"not applicable — governance toolkit, not a capability-rankable system","citation":null,"status":"not-applicable","tier":"T3"},"capability-band":{"value":"not applicable — governance toolkit, not a capability-rankable system","citation":null,"status":"not-applicable","tier":"T3"},"capability-benchmark-sources":{"value":"not applicable — governance toolkit, not a capability-rankable system","citation":null,"status":"not-applicable","tier":"T3"},"capability-last-verified":{"value":"not applicable — governance toolkit, not a capability-rankable system","citation":null,"status":"not-applicable","tier":"T3"},"use-case-tags":{"value":"not applicable — governance/verification kernel, not a memory system","citation":null,"status":"not-applicable","tier":"T3"},"use-case-anti-tags":{"value":"not applicable — governance/verification kernel, not a memory system","citation":null,"status":"not-applicable","tier":"T3"},"adoption-accelerator":{"value":"","citation":null,"status":"no-data","tier":"T3"},"architecture-deployment-locus":{"value":"local","citation":"https://raw.githubusercontent.com/microsoft/agent-governance-toolkit/main/README.md","status":"real-data","tier":"T2","source_class":"repo"},"licensing-bucket":{"value":"open-source","citation":"https://github.com/microsoft/agent-governance-toolkit/blob/main/LICENSE","status":"real-data","tier":"T1","source_class":"repo"},"positioning-platform-vs-product":{"value":"platform","citation":"https://raw.githubusercontent.com/microsoft/agent-governance-toolkit/main/README.md","status":"real-data","tier":"T2","source_class":"repo"},"taxonomy-three-layer-rollup":{"value":"agent-infra","citation":"https://github.com/MrPeppersDev/agent-infrastructure-landscape/blob/main/docs/schema/section-to-three-layer-rollup.json","status":"real-data","tier":"T1","source_class":"repo"},"developer-activity-opendigger":{"value":"{\"activity\":295.91,\"as_of\":\"2026-09\",\"openrank_12mo\":16.36,\"openrank_current\":17.73,\"participants\":86}","citation":"https://oss.open-digger.cn/github/microsoft/agent-governance-toolkit/openrank.json","status":"real-data","tier":"T2","last_verified_at":"2026-10-28","source_class":"third-party"},"freshness-date":{"value":"2026-10-22","citation":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/microsoft-agent-governance-toolkit--gh-microsoft-agent-governance-toolkit","status":"real-data","tier":"T2","source_class":"catalog"},"compliance-certifications":{"value":"not applicable — no hosted service","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"not-applicable","tier":"T1","source_class":"repo"},"sdk-languages":{"value":"csharp,python,rust,typescript","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"},"protocol-support":{"value":"","citation":null,"status":"no-data","tier":"T3"},"maturity":{"value":"preview","citation":"https://github.com/microsoft/agent-governance-toolkit","status":"real-data","tier":"T1","source_class":"repo"}},"corroboration":{"cited_cells":53,"third_party_cells":1},"edges":{"outgoing":[],"incoming":[]},"history":[{"date":"2026-10-22","commit":"89dcc719ed","pr":195,"kind":"update","changes":[{"field":"latest-release","label":"Latest release","from":"v3.4.0 2026-05-05","to":"v4.1.0 (2026-06-11)","source":"https://pypi.org/project/agent-governance-toolkit/"}]}],"license":"CC-BY-4.0","source":"https://github.com/MrPeppersDev/agent-infrastructure-landscape/blob/main/data/landscape.json"}