microsoft/agent-governance-toolkit v3.0.1

v3.0.1

Repository: microsoft/agent-governance-toolkit

Tag: v3.0.1

Published: 2026-04-01T18:02:16Z

Prerelease: no

Release notes:

What's New in v3.0.1

New SDKs

• Rust SDK (\gentmesh\ crate) — policy, trust, audit, Ed25519 identity
• Go SDK — policy, trust, audit, identity with functional options

New Features

• \gentmesh trust report\ CLI command — trust score visualization
• Entra Agent ID adapter for managed identity integration
• Secure code generation templates with AST validation
• SBOM generation (SPDX/CycloneDX) with Ed25519 artifact signing
• Tenant isolation checklist and private endpoint deployment examples

Security

• Secret scanning workflow (Gitleaks)
• 4 new fuzz targets (7 total): prompt injection, MCP scanner, sandbox, trust scoring
• Dependabot expanded to 13 ecosystems (+cargo, gomod, nuget, docker)
• path-to-regexp ReDoS fix (8.3.0 → 8.4.0)
• ESRP Release publishing for Rust crates (crates.io)

Documentation

• 7 new tutorials (#21–27): Rust SDK, Go SDK, delegation chains, budgets, security hardening, SBOM, MCP scan
• README updated: 5 SDK languages, 20+ framework integrations, security tooling table
• PUBLISHING.md rewritten with full Microsoft compliance policies

CI/CD

• Branch protection: 13 required status checks, squash-only merges
• Python 3.10 matrix exclusions for packages requiring >=3.11
• Multiple ADO build fixes (TypeScript, Rust, NuGet)

Packages

| Package | Version | |---------|---------| | Python (8 packages) | 3.0.1 | | TypeScript SDK | 1.0.1 | | Copilot Extension | 1.0.1 | | MCP Server | 1.0.2 | | .NET SDK | 3.0.1 | | Rust crate | 0.1.1 |

Full Changelog: https://github.com/microsoft/agent-governance-toolkit/compare/v3.0.0...v3.0.1