microsoft/agent-governance-toolkit v3.1.0

v3.1.0 - Unified CLI, Governance Dashboard, Quantum-Safe Crypto

Repository: microsoft/agent-governance-toolkit

Tag: v3.1.0

Published: 2026-04-11T16:51:13Z

Prerelease: no

Release notes:

Agent Governance Toolkit v3.1.0

> 📦 Package Availability: Signed packages are currently being processed through Microsoft's ESRP Release pipeline for code signing and malware scanning. Expect published binaries on PyPI, npm, NuGet, and crates.io by the week of April 14. In the meantime, you can install directly from source: > ash > pip install git+https://github.com/microsoft/agent-governance-toolkit.git@v3.1.0#subdirectory=packages/agent-compliance >

> Public Preview - Microsoft-signed, production-quality. Feedback welcome.

Highlights

Unified agt CLI

One command to rule them all. No more hunting across 12 separate binaries.

pip install agent-governance-toolkit[full]
agt doctor # Check installation health
agt verify # OWASP ASI 2026 compliance
agt lint-policy . # Lint your policies

Plugin-extensible via entry points - sub-packages auto-register their commands.

Governance Dashboard

Real-time terminal dashboard showing agent fleet status, trust scores, SLO health, and compliance metrics.

Agent Lifecycle Management

Complete provisioning, credential rotation, orphan detection, and decommission workflow. 8-state lifecycle model with full audit trail.

Shadow AI Discovery

New agent-discovery package scans your infrastructure for unregistered agents and builds a centralized inventory with risk scoring.

Quantum-Safe Cryptography

ML-DSA-65 (FIPS 204) signing alongside Ed25519. Post-quantum ready today.

OWASP ASI 2026

Migrated to the latest Agentic Security Initiative taxonomy with reference architecture. Still 10/10 coverage.

PromptDefenseEvaluator

12-vector prompt injection audit for systematic testing of agents against known attack patterns.

Install / Upgrade

pip install agent-governance-toolkit[full]==3.1.0
agt doctor

TypeScript: npm install @agentmesh/sdk | .NET: dotnet add package Microsoft.AgentGovernance | Rust: cargo add agentmesh

Security Fixes

• Patched dependency verification bypass and trust handshake DID forgery (#920)
• Hardened CLI error handling - CWE-209 (internal info disclosure) (#926)
• Audit log key-whitelisting
• Agent identifier injection prevention

Breaking Changes

None. Drop-in upgrade from any v3.0.x release.

By the Numbers

• 9,500+ tests | 10/10 OWASP coverage | < 0.1ms policy eval | 20+ framework integrations | 5 SDK languages

Full Changelog: https://github.com/microsoft/agent-governance-toolkit/compare/v3.0.1...v3.1.0