Issues

• agent-learning: ExcessivePrivilegeEvaluation misses whitespace, list-valued, nested, partial-wildcard and capitalised privilege values

  needs-review:MEDIUM
  microsoft/agent-governance-toolkit#4400 · Filter by author ShivamSharma43 opened on Oct 20, 2026
  1

• RFC: Java host SDK for the Agent Control Specification (FFM over the Rust C ABI)

  microsoft/agent-governance-toolkit#4378 · Filter by author fer-marino opened on Oct 20, 2026

• Tutorial 08: state the Python Cedar boundary and add a cedarpy dispatcher example

  documentation
  microsoft/agent-governance-toolkit#4375 · Filter by author MohammadHaroonAbuomar opened on Oct 20, 2026
  1

• Built-in Cedar policy dispatcher for the Python SDK

  enhancementpython
  microsoft/agent-governance-toolkit#4374 · Filter by author MohammadHaroonAbuomar opened on Oct 20, 2026
  1

• Remove the Public Preview label from documentation and code

  documentation
  microsoft/agent-governance-toolkit#4373 · Filter by author MohammadHaroonAbuomar opened on Oct 20, 2026

• AgentControl has no close(); examples call runtime.close() and crash

  bugpython
  microsoft/agent-governance-toolkit#4372 · Filter by author MohammadHaroonAbuomar opened on Oct 20, 2026
  1

• Publish GitHub releases for v5.0.0 and later; latest release is still v4.1.0

  ci/cddocumentation
  microsoft/agent-governance-toolkit#4371 · Filter by author MohammadHaroonAbuomar opened on Oct 20, 2026

• [Feature]: ADR-0030 approval requests tell the human approver tool.invoke, never which tool or what it will do

  microsoft/agent-governance-toolkit#4363 · Filter by author minitru opened on Oct 19, 2026
  1

• [Bug]: SessionScope.is_path_allowed does not normalize relative segments (..) or enforce directory boundaries

  bugneeds-review:HIGHtriage
  microsoft/agent-governance-toolkit#4355 · Filter by author Kaap10 opened on Oct 18, 2026
  2

• feat(redteam): 240-scenario measurement suite with actual detector evidence and reporting

  microsoft/agent-governance-toolkit#4345 · Filter by author jersonboydmilan opened on Oct 17, 2026
  1

• [Bug]: False Positive "Tool_poisoning (critical)" in Claude Code plugin

  bugtriage
  microsoft/agent-governance-toolkit#4343 · Filter by author Saassyuser opened on Oct 16, 2026
  2

• Policy template example: three-law runtime guard (Authority/Autonomy/Accountability) for regulated agent workflows

  needs-review:HIGH
  microsoft/agent-governance-toolkit#4342 · Filter by author stevenzhao07 opened on Oct 16, 2026
  3

• RFC: Optional Governance Substrate v0.7.0 Integration for Verified Execution and Emergency Shutdown

  triage
  microsoft/agent-governance-toolkit#4298 · Filter by author electricwolfemarshmallowhypertext opened on Oct 13, 2026
  1

• [Bug]: agent-mesh PolicyRule splits and/or inside quoted literals, so deny rules match every request and allow rules never match

  needs-review:HIGH
  microsoft/agent-governance-toolkit#4291 · Filter by author Zhuoxi2000 opened on Oct 12, 2026
  5

• AGT Studio: agt serve implementation (Epic 1b, issue 7/32)

  agent-governancearchitectureenhancementsecurity
  microsoft/agent-governance-toolkit#4281 · Filter by author Ricky-G opened on Oct 11, 2026 · AGT Studio
  2

• Proposal: source-rights evidence hook before content-related agent/tool actions

  needs-review:UNKNOWN
  microsoft/agent-governance-toolkit#4230 · Filter by author reflectme-source opened on Oct 5, 2026
  2

• RFC: External institutional authority admission across federated agent runtimes

  triage
  microsoft/agent-governance-toolkit#4217 · Filter by author veraxis-protocol opened on Oct 2, 2026
  4

• fix(agentmesh-mcp): prevent Rust MCP signature field reframing

  bugPriority: HIGHsecurity
  microsoft/agent-governance-toolkit#4199 · Filter by author Ricky-G opened on Oct 1, 2026
  2

• [Feature]: agent-mesh tests for attempt counts on lost-response retries

  needs-review:HIGH
  microsoft/agent-governance-toolkit#4198 · Filter by author astrogilda opened on Sep 30, 2026
  1

• [Bug]: Python SDK small correctness and ergonomics findings (tracking)

  bugneeds-review:MEDIUMtriage
  microsoft/agent-governance-toolkit#4048 · Filter by author david-long1 opened on Sep 20, 2026
  4

• [Bug]: HostSession sends model/messages/response snapshot keys, but the snapshot contract and the adapters use model_request/model_response/output

  bugneeds-review:MEDIUMtriage
  microsoft/agent-governance-toolkit#4047 · Filter by author david-long1 opened on Sep 20, 2026
  1

• agent-governance-toolkit-core[migrate] extra pins an unresolvable agt-policies range

  microsoft/agent-governance-toolkit#4019 · Filter by author karimad opened on Sep 17, 2026

• policy-engine: AgentControl::new(runtime) leaves parts=None, making with_telemetry a no-op and revalidating against Limits::default

  microsoft/agent-governance-toolkit#3941 · Filter by author MohammadHaroonAbuomar opened on Sep 13, 2026
  2

• RFC: define the verified approver assertion (MCP-SECURITY-GATEWAY-1.0 §4.3 and ADR-0030)

  triage
  microsoft/agent-governance-toolkit#3918 · Filter by author dvanostrand opened on Sep 9, 2026
  5

• BackendRegistry / OPAPolicyBackend / CedarPolicyBackend are never consulted by govern() - registering a backend is a silent no-op

  microsoft/agent-governance-toolkit#3911 · Filter by author fer-marino opened on Sep 9, 2026
  1