microsoft/agent-governance-toolkit v3.2.0

v3.2.0 — E2E Encryption, Wire Protocol, Registry, Relay

Repository: microsoft/agent-governance-toolkit

Tag: v3.2.0

Published: 2026-04-22T00:33:45Z

Prerelease: no

Release notes:

Agent Governance Toolkit v3.2.0

> Public Preview — Microsoft-signed, production-quality. Feedback welcome.

Highlights

E2E Encrypted Agent Messaging (Signal Protocol)

Full end-to-end encryption across Python AND TypeScript SDKs:

• X3DH key agreement, Double Ratchet (ChaCha20-Poly1305 + AAD)
• SecureChannel high-level API
• EncryptedTrustBridge — trust-gated encrypted sessions
• MeshClient — relay transport with plaintext peer compat, KNOCK pending queue, wsFactory hook
• 81 encryption tests across both languages

AgentMesh Wire Protocol v1.0

Published protocol specification (docs/specs/AGENTMESH-WIRE-1.0.md): envelope format, cipher suite, KNOCK intent protocol, registry API, relay semantics, auth model, protocol versioning. Clean-room design with full IP/prior-art documentation.

First-Party Registry + Relay Services

• Registry — 8 REST endpoints: agent registration, pre-key bundles (atomic OPK consumption), discovery, presence, reputation
• Relay — WebSocket store-and-forward with 72h TTL offline inbox, heartbeat, KNOCK routing, ciphertext-only storage

New Crypto Libraries (TypeScript)

• @noble/curves — X25519, Ed25519 (MIT, audited)
• @noble/ciphers — ChaCha20-Poly1305 (MIT, audited)
• @noble/hashes — HKDF-SHA256, HMAC (MIT, audited)

Install

pip install --upgrade agent-governance-toolkit[full]==3.2.0
npm install @microsoft/agentmesh-sdk@3.2.0

No breaking changes. Backwards-compatible with v3.1.x.