Agent Governance

March 5, 2026 · View on GitHub

⚠️ DEPRECATED — This project has moved to microsoft/agent-governance-toolkit. All future development happens there. Please star and follow the new repo!


Agent Governance

The safety, trust, and reliability platform for production AI agents

One install for the complete governance stack — kernel · trust mesh · runtime supervisor · reliability engineering

PyPI CI GitHub Stars Sponsor Python License

pip install ai-agent-governance[full]

ArchitectureQuick StartComponentsWhy Unified?EcosystemOWASP ComplianceTraction

If this project helps you, please star it! It helps others discover the agent governance stack.

🔗 Part of the Agent Governance Ecosystem — Installs Agent OS · AgentMesh · Agent Hypervisor · Agent SRE


Architecture

┌─────────────────────────────────────────────────────────────────┐
│                      agent-governance                           │
│                  pip install ai-agent-governance[full]           │
├─────────────────────────────────────────────────────────────────┤
│                                                                 │
│   ┌───────────────────┐      ┌───────────────────────────┐     │
│   │   Agent OS Kernel │◄────►│   AgentMesh Platform      │     │
│   │                   │      │                           │     │
│   │  Policy Engine    │      │  Zero-Trust Identity      │     │
│   │  Capability Model │      │  Mutual TLS for Agents    │     │
│   │  Audit Logging    │      │  Encrypted Channels       │     │
│   │  Syscall Layer    │      │  Trust Scoring             │     │
│   └────────┬──────────┘      └─────────────┬─────────────┘     │
│            │                               │                   │
│            ▼                               ▼                   │
│   ┌───────────────────┐      ┌───────────────────────────┐     │
│   │ Agent Hypervisor  │      │   Agent SRE               │     │
│   │                   │      │                           │     │
│   │  Execution Rings  │      │  Health Monitoring        │     │
│   │  Resource Limits  │      │  SLO Enforcement          │     │
│   │  Runtime Sandboxing│     │  Incident Response        │     │
│   │  Kill Switch      │      │  Chaos Engineering        │     │
│   └───────────────────┘      └───────────────────────────┘     │
│                                                                 │
└─────────────────────────────────────────────────────────────────┘

Quick Start

import asyncio
from agent_os import StatelessKernel, ExecutionContext
from agentmesh import AgentIdentity

# Boot the governance kernel
kernel = StatelessKernel()
ctx = ExecutionContext(agent_id="my-agent", policies=["read_only"])

# Establish zero-trust agent identity
identity = AgentIdentity.create(
    name="my-agent",
    sponsor="alice@company.com",
    capabilities=["read:data", "write:reports"],
)

# Execute a governed action
async def main():
    result = await kernel.execute(
        action="database_query",
        params={"query": "SELECT * FROM users"},
        context=ctx,
    )
    print(f"Success: {result.success}, Data: {result.data}")

asyncio.run(main())

Install only what you need:

# Core: kernel + trust mesh
pip install ai-agent-governance

# Full stack: adds hypervisor + SRE
pip install ai-agent-governance[full]

# À la carte
pip install ai-agent-governance[hypervisor]
pip install ai-agent-governance[sre]

Components

ComponentPackageWhat It Does
Agent OSagent-os-kernelGovernance kernel — policy enforcement, capability-based security, audit trails, and the syscall abstraction layer for AI agents
AgentMeshagentmesh-platformZero-trust communication — mutual TLS for agents, encrypted channels, trust scoring, and secure multi-agent orchestration ("SSL for AI Agents")
Agent Hypervisoragent-hypervisorRuntime supervisor — execution rings, resource limits, sandboxed execution, kill switches, and real-time intervention for autonomous agents
Agent SREagent-sreReliability engineering — health monitoring, SLO enforcement, incident response automation, and chaos engineering for agent fleets

Star the ecosystem

Agent OS Stars   AgentMesh Stars   Agent Hypervisor Stars   Agent SRE Stars


Why a Unified Governance Stack?

Running AI agents in production without governance is like deploying microservices without TLS, RBAC, or monitoring. Each layer solves a different problem:

ConcernWithout GovernanceWith Agent Governance
SecurityAgents call any tool, access any resourceCapability-based permissions, policy enforcement
TrustNo identity verification between agentsMutual TLS, trust scores, encrypted channels
ControlRunaway agents consume unbounded resourcesExecution rings, resource limits, kill switches
ReliabilitySilent failures, no observabilitySLO enforcement, health checks, incident automation
ComplianceNo audit trail for agent decisionsImmutable audit logs, decision lineage tracking

One install. Four layers of protection.

The meta-package ensures all components are version-compatible and properly integrated. No dependency conflicts, no version mismatches — just a single pip install to go from zero to production-grade agent governance.


The Agent Governance Ecosystem

agent-governance ─── The meta-package (you are here)
├── agent-os-kernel ─── Governance kernel
├── agentmesh-platform ─── Zero-trust mesh
├── agent-hypervisor ─── Runtime supervisor (optional)
└── agent-sre ─── Reliability engineering (optional)

Each component works standalone, but they're designed to work together. The kernel enforces policy, the mesh secures communication, the hypervisor controls execution, and SRE keeps everything running.


Examples

See the examples/ directory for runnable demos:

# Quick start — boot the governance stack in 30 lines
python examples/quickstart.py

# Full stack — all 4 layers working together
python examples/governed_agent.py

Framework Integration

# LangChain
pip install langchain ai-agent-governance

# CrewAI
pip install crewai ai-agent-governance

# AutoGen
pip install pyautogen ai-agent-governance

🗺️ Roadmap

QuarterMilestone
Q1 2026✅ Unified meta-package, 4 components integrated, PyPI published
Q2 2026Cross-component integration tests, unified CLI, dashboard UI
Q3 2026Helm chart for Kubernetes, managed cloud preview
Q4 2026SOC2 Type II certification, enterprise support tier

🛡️ OWASP Agentic Top 10 Coverage

The agent governance stack covers 9 of 10 risks from the OWASP Top 10 for Agentic Applications (2026):

OWASP RiskCoverageComponent
Agent Goal HijackAgent OS — Policy Engine
Tool MisuseAgent OS — Capability Sandboxing
Identity & Privilege AbuseAgentMesh — DID Identity
Supply Chain Vulnerabilities🔄 RoadmapAgent-SBOM (planned)
Unexpected Code ExecutionAgent Hypervisor — Execution Rings
Memory & Context PoisoningAgent OS — VFS + CMVK
Insecure Inter-Agent CommunicationAgentMesh — IATP Protocol
Cascading FailuresAgent SRE — Circuit Breakers
Human-Agent Trust ExploitationAgent OS — Approval Workflows
Rogue AgentsAgent Hypervisor — Kill Switch

→ Full OWASP compliance mapping with code examples


📈 Traction

The ecosystem is growing — 3,000+ views, 9,400+ clones, and 1,278 unique developers in the last 14 days alone. Traffic from Medium, Reddit, LinkedIn, Google, and even ChatGPT.

→ See full traction report


Contributing

We welcome contributions! See our Contributing Guide for details.

For component-specific contributions, see:

License

MIT — see LICENSE for details.


imransiddique.com · Documentation · GitHub

Building the governance layer for the agentic era