microsoft / agent-governance-toolkit
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
- Stars
- 6,555 stars
- Forks
- 1,129 forks
- Language
- Python
- License
- MIT
- Created
- Mar 2, 2026
- Last push
- Nov 11, 2026
- Updated
- Nov 11, 2026
Why these Tags: an agent read the README and quoted it
- Authorization library from the readme:
On every call, `safe_tool` evaluates the YAML policy, logs the decision to an audit trail, and raises `GovernanceDenied` when the policy blocks the action.
- Agent sandbox from the readme:
| **Agent Runtime** | Execution sandboxing with four privilege rings |
An agent gave these Tags from the fixed Tag list in the AwesomeRepos source code. A code check kept each Tag only when its quote is in the text. A wrong Tag? Report an error with the form at the end of this page.
Admitted to the Repository Index on Nov 10, 2026: 6,546 stars on 2026-11-10.
Star History
188 days recorded, May 8, 2026 – Nov 11, 2026 (UTC). Net change +5,141 stars.
The star count of each day is the latest count minus the net stars of the later days.
Add this Star History to a README
The images follow the light or dark theme of the page that shows them, and update every hour.
Add ?theme=light or ?theme=dark
to the chart address to keep one theme.
Star History chart
[](https://awesomerepos.com/microsoft/agent-governance-toolkit) Badge
[](https://awesomerepos.com/microsoft/agent-governance-toolkit) Timeline
It gained stars on 187 of the 188 days recorded since May 8, 2026.
Its largest 7 days were May 24, 2026 to May 30, 2026: 1,605 stars.
In the 30 days to Nov 11, 2026 it got 163 stars, 12% fewer than in the 30 days before.
- Created on the Repository Host
- Release v3.5.0
- Release v3.7.0
- Release v3.6.0
- +251 stars in one day
- Largest star day recorded: +539 stars
- Release v4.0.0
- Release v4.1.0
- Reached 5,000 stars, 148 days after it was created
- +398 stars in one day
- Entered the Repository Index: 6,546 stars on 2026-11-10
- Latest push
The timeline comes from the creation date and the releases on the Repository Host, the Admission, the Star History, and the Observations. Star milestones show only when the Star History records the day. The list shows up to 5 stable releases from the latest 10 releases recorded. When none of them is stable, one item counts the pre-releases. On the chart of net stars each day, a solid line marks each recorded release.
Forks and pushes
From 2 Observations, Nov 11, 2026 – Nov 12, 2026. Forks +1. AwesomeRepos saw a new push on 1 of 1 days.
- Nov 12, 2026: new push
A filled day: the last push time changed since the Observation before it.
Health facts
Measured facts in four separate dimensions, each with a date and a source. AwesomeRepos does not add them into one score. AwesomeRepos reads the weekly commits, the changelog, and the community files each week for the 5,000 visible repositories with the most stars and for each rising repository. How AwesomeRepos defines each check
Maintenance
2 of 4 checks (2 without data)-
Yes: Not archived
GitHub does not mark the repository as archived. Source
-
Yes: A push in the last 90 days
Last push on 2026-11-11, 0 days ago. Source
-
No data: Commits in the last 13 weeks
No data: AwesomeRepos has not read the weekly commits.
-
No data: Commits in 26 or more of the last 52 weeks
No data: AwesomeRepos has not read the weekly commits.
Releases
2 of 3 checks (1 without data)-
Yes: A release in the last 365 days
Newest release v4.1.0 on 2026-06-09, 155 days ago. 10 or more releases in the last 365 days. Source
-
Yes: The newest release tag is a semantic version
The newest release tag is v4.1.0. Source
-
No data: A changelog file at the root
No data: AwesomeRepos has not scanned this repository.
Security practice
0 of 1 check (1 without data)-
No data: A security policy
No data: AwesomeRepos has not scanned this repository.
AwesomeRepos has not asked OpenSSF Scorecard about this repository.
Community files
1 of 3 checks (2 without data)-
Yes: A licence
GitHub finds the licence MIT. Source
-
No data: A contributing guide
No data: AwesomeRepos has not scanned this repository.
-
No data: A code of conduct
No data: AwesomeRepos has not scanned this repository.
Dependencies in the index
This section shows the packages that connect this repository to other repositories in the index.
The GitHub dependency graph of this repository names 1,881 direct packages (scanned on Nov 12, 2026). Packages from 152 other repositories in the index are among them.
No scanned repository names a package from this repository.
Uses (in the index) · 152
- react/react 253K
npm: react, react-dom
-
PyPI: langchain-core, langchain-openai
- microsoft/TypeScript 112K
npm: @typescript/typescript-aix-ppc64, @typescript/typescript-darwin-arm64, @typescript/typescript-darwin-x64, @typescript/typescript-freebsd-arm64 and 18 more
- axios/axios 109K
npm: axios
-
npm: tailwindcss
- django/django 92K
PyPI: django
- gin-gonic/gin 90K
Go: github.com/gin-gonic/gin
-
Cargo: globset
-
npm: express
-
PyPI: scikit-learn
Show all 152
- webpack/webpack 66K
npm: webpack
- BerriAI/litellm 63K
PyPI: litellm
-
NuGet: AutoGen.Core, AutoGen.OpenAI
PyPI: autogen-agentchat, autogen-core, autogen-ext
- crewAIInc/crewAI 61K
PyPI: crewai
- Textualize/rich 58K
PyPI: rich
-
PyPI: llama-index-core
-
npm: @types/chrome, @types/express, @types/glob, @types/jest and 6 more
- astral-sh/ruff 51K
PyPI: ruff
-
PyPI: pandas
-
PyPI: streamlit
- jestjs/jest 45K
npm: jest
- grpc/grpc 45K
PyPI: grpcio, grpcio-tools
-
PyPI: langgraph
- colinhacks/zod 44K
npm: zod
- psf/black 42K
PyPI: black
- evanw/esbuild 40K
npm: @esbuild/aix-ppc64, @esbuild/android-arm, @esbuild/android-arm64, @esbuild/android-x64 and 23 more
- swc-project/swc 34K
npm: @swc/core, @swc/core-darwin-arm64, @swc/core-darwin-x64, @swc/core-linux-arm-gnueabihf and 9 more
- explosion/spaCy 34K
PyPI: spacy
- tokio-rs/tokio 34K
Cargo: tokio, tokio-macros, tokio-util
- numpy/numpy 33K
PyPI: numpy
-
PyPI: openai
-
PyPI: openai-agents
-
PyPI: chromadb
- mastra-ai/mastra 29K
npm: @mastra/core
-
PyPI: pydantic
- postcss/postcss 29K
npm: postcss
- mlflow/mlflow 29K
PyPI: mlflow
-
NuGet: Microsoft.SemanticKernel, Microsoft.SemanticKernel.Connectors.AzureOpenAI
PyPI: semantic-kernel
- tj/commander.js 28K
npm: commander
- vercel/ai 28K
npm: @ai-sdk/provider-utils, @ai-sdk/ui-utils
- eslint/eslint 28K
npm: eslint
-
PyPI: mkdocs-material
-
PyPI: haystack-ai
- rollup/rollup 26K
npm: @rollup/rollup-android-arm-eabi, @rollup/rollup-android-arm64, @rollup/rollup-darwin-arm64, @rollup/rollup-darwin-x64 and 21 more
-
PyPI: mcp
-
npm: winston
- chalk/chalk 23K
npm: chalk
- mochajs/mocha 23K
npm: mocha
- websockets/ws 23K
npm: ws
- mkdocs/mkdocs 23K
PyPI: mkdocs
-
npm: autoprefixer
-
PyPI: google-adk
-
PyPI: datasets
-
PyPI: pydantic-ai
- python/mypy 21K
PyPI: mypy
- motdotla/dotenv 21K
npm: dotenv
- openai/tiktoken 20K
PyPI: tiktoken
-
PyPI: sentence-transformers
- plotly/plotly.py 19K
PyPI: plotly
-
npm: @langchain/core, langchain
- pallets/click 18K
PyPI: click
-
PyPI: networkx
-
npm: @vitest/coverage-v8, vitest
-
Cargo: smol_str
- clap-rs/clap 17K
Cargo: clap, clap_builder, clap_derive, clap_lex
- aio-libs/aiohttp 17K
PyPI: aiohttp
-
npm: @typescript-eslint/eslint-plugin, @typescript-eslint/parser
- hyperium/hyper 16K
Cargo: hyper
- brix/crypto-js 16K
npm: crypto-js
- PyO3/pyo3 16K
Cargo: pyo3, pyo3-build-config, pyo3-ffi, pyo3-macros and 1 more
- encode/httpx 16K
PyPI: httpx
-
PyPI: pre-commit
- uuidjs/uuid 15K
npm: uuid
- scipy/scipy 15K
PyPI: scipy
- nltk/nltk 15K
PyPI: nltk
-
PyPI: pytest
-
NuGet: Microsoft.Agents.AI
PyPI: agent-framework
-
npm: @rolldown/binding-android-arm-eabi, @rolldown/binding-android-arm64, @rolldown/binding-darwin-arm64, @rolldown/binding-darwin-x64 and 12 more
-
npm: @modelcontextprotocol/sdk
- redis/redis-py 14K
PyPI: redis
-
npm: ts-node
-
Cargo: windows-core, windows-implement, windows-interface, windows-link and 13 more
-
PyPI: sqlalchemy
- Arize-ai/phoenix 12K
PyPI: arize-phoenix
-
Cargo: reqwest
- egoist/tsup 11K
npm: tsup
- wandb/wandb 11K
PyPI: wandb
- Kludex/uvicorn 11K
PyPI: uvicorn
- serde-rs/serde 11K
Cargo: serde, serde_core, serde_derive, serde_derive_internals
-
PyPI: pdfplumber
-
npm: html-webpack-plugin
- rust-bakery/nom 10K
Cargo: nom
- py-pdf/pypdf 10K
PyPI: pypdf
- tobymao/sqlglot 9.8K
PyPI: sqlglot
-
npm: eslint-plugin-react
-
Cargo: js-sys, wasm-bindgen, wasm-bindgen-futures, wasm-bindgen-macro and 3 more
-
PyPI: hypothesis
- 0xPlaygrounds/rig 9.1K
Cargo: rig-core
-
GitHub Actions: actions/checkout
-
PyPI: python-dotenv
- isaacs/node-glob 8.7K
npm: glob
-
npm: path-to-regexp
- MagicStack/asyncpg 8.1K
PyPI: asyncpg
-
Cargo: napi, napi-build, napi-derive, napi-derive-backend and 1 more
npm: @napi-rs/cli
- pyca/cryptography 7.8K
PyPI: cryptography
- rustls/rustls 7.8K
Cargo: rustls
-
npm: lightningcss-android-arm64, lightningcss-darwin-arm64, lightningcss-darwin-x64, lightningcss-freebsd-x64 and 7 more
- pypa/hatch 7.3K
PyPI: hatchling
- docker/docker-py 7.2K
PyPI: docker
- tokio-rs/mio 7.1K
Cargo: mio
-
Cargo: tracing, tracing-attributes, tracing-core, tracing-futures
- dtolnay/anyhow 6.7K
Cargo: anyhow
- nodeca/js-yaml 6.6K
npm: js-yaml
- Helicone/helicone 6.3K
PyPI: helicone
- google/uuid 6.2K
Go: github.com/google/uuid
-
NuGet: Azure.AI.OpenAI
-
PyPI: lark
-
PyPI: agentops
- rust-lang/futures-rs 5.9K
Cargo: futures, futures-channel, futures-core, futures-executor and 5 more
- PyO3/maturin 5.9K
PyPI: maturin
- isaacs/rimraf 5.9K
npm: rimraf
-
PyPI: python-docx
-
PyPI: websockets
- jpadilla/pyjwt 5.7K
PyPI: pyjwt
- serde-rs/json 5.7K
Cargo: serde_json
-
PyPI: azure-ai-agents, azure-core, azure-identity
- python/typeshed 5.2K
PyPI: types-pyyaml
-
PyPI: structlog
-
PyPI: jsonschema
- xunit/xunit 4.6K
NuGet: xunit
- briansmith/ring 4.1K
Cargo: ring
- PyCQA/flake8 3.8K
PyPI: flake8
- Tinche/aiofiles 3.3K
PyPI: aiofiles
- lxml/lxml 3.1K
PyPI: lxml
-
npm: webextension-polyfill
- yaml/pyyaml 3K
PyPI: pyyaml
- aaubry/YamlDotNet 2.9K
NuGet: YamlDotNet
- agronholm/anyio 2.6K
PyPI: anyio
- RustCrypto/hashes 2.3K
Cargo: sha1, sha2, sha3
-
PyPI: sentry-sdk
-
PyPI: pytest-asyncio
- pyca/pynacl 1.2K
PyPI: pynacl
- RustCrypto/AEADs 975
Cargo: aes-gcm
-
npm: @noble/curves
-
npm: @noble/hashes
-
Cargo: fiat-crypto
-
Cargo: ed25519
-
PyPI: typing-extensions
-
npm: @noble/ed25519
-
npm: @noble/ciphers
-
PyPI: pyatr
-
Cargo: const-oid
Used by (in the index) · 0
None.
Sources: the GitHub dependency graph of each repository, and deps.dev for the source repository of each package (checked on Nov 12, 2026). A dependency graph also names development packages. deps.dev takes most source repositories from package metadata. How the dependency graph is made
Observations
Latest Observation, Nov 12, 2026: 6,555 stars, 1,129 forks, last push Nov 11, 2026, not archived. One of 2 Observations since Nov 11, 2026.