Issues

• [Bug]: agent-hypervisor check_command misses a denied command after an assignment or a wrapper (FOO=x curl, env curl, nohup curl)

  needs-review:MEDIUM
  microsoft/agent-governance-toolkit#4331 · Filter by author ShivamSharma43 opened on Oct 15, 2026
  1

• RFC: Optional Governance Substrate v0.7.0 Integration for Verified Execution and Emergency Shutdown

  triage
  microsoft/agent-governance-toolkit#4298 · Filter by author electricwolfemarshmallowhypertext opened on Oct 13, 2026
  1

• [Bug]: agent-mesh PolicyRule splits and/or inside quoted literals, so deny rules match every request and allow rules never match

  needs-review:HIGH
  microsoft/agent-governance-toolkit#4291 · Filter by author Zhuoxi2000 opened on Oct 12, 2026
  3

• AGT Studio: agt serve implementation (Epic 1b, issue 7/32)

  agent-governancearchitectureenhancementsecurity
  microsoft/agent-governance-toolkit#4281 · Filter by author Ricky-G opened on Oct 11, 2026 · AGT Studio
  2

• Proposal: source-rights evidence hook before content-related agent/tool actions

  needs-review:UNKNOWN
  microsoft/agent-governance-toolkit#4230 · Filter by author reflectme-source opened on Oct 5, 2026
  2

• RFC: External institutional authority admission across federated agent runtimes

  triage
  microsoft/agent-governance-toolkit#4217 · Filter by author veraxis-protocol opened on Oct 2, 2026
  4

• fix(agentmesh-mcp): prevent Rust MCP signature field reframing

  bugPriority: HIGHsecurity
  microsoft/agent-governance-toolkit#4199 · Filter by author Ricky-G opened on Oct 1, 2026
  2

• [Feature]: agent-mesh tests for attempt counts on lost-response retries

  needs-review:HIGH
  microsoft/agent-governance-toolkit#4198 · Filter by author astrogilda opened on Sep 30, 2026
  1

• [Bug]: Python SDK small correctness and ergonomics findings (tracking)

  bugneeds-review:MEDIUMtriage
  microsoft/agent-governance-toolkit#4048 · Filter by author david-long1 opened on Sep 20, 2026
  4

• [Bug]: HostSession sends model/messages/response snapshot keys, but the snapshot contract and the adapters use model_request/model_response/output

  bugneeds-review:MEDIUMtriage
  microsoft/agent-governance-toolkit#4047 · Filter by author david-long1 opened on Sep 20, 2026
  1

• agent-governance-toolkit-core[migrate] extra pins an unresolvable agt-policies range

  microsoft/agent-governance-toolkit#4019 · Filter by author karimad opened on Sep 17, 2026

• policy-engine: AgentControl::new(runtime) leaves parts=None, making with_telemetry a no-op and revalidating against Limits::default

  microsoft/agent-governance-toolkit#3941 · Filter by author MohammadHaroonAbuomar opened on Sep 13, 2026
  1

• RFC: define the verified approver assertion (MCP-SECURITY-GATEWAY-1.0 §4.3 and ADR-0030)

  triage
  microsoft/agent-governance-toolkit#3918 · Filter by author dvanostrand opened on Sep 9, 2026
  4

• BackendRegistry / OPAPolicyBackend / CedarPolicyBackend are never consulted by govern() - registering a backend is a silent no-op

  microsoft/agent-governance-toolkit#3911 · Filter by author fer-marino opened on Sep 9, 2026
  1

• AGT Studio: package + CI scaffold + CODEOWNERS (Epic 1a, issue 5/32)

  agent-governancearchitectureci/cdenhancement
  microsoft/agent-governance-toolkit#3898 · Filter by author Ricky-G opened on Sep 7, 2026 · AGT Studio
  3

• Governance-layer gap suggestions: SBOM / context integrity / human-approval middleware

  needs-review:HIGH
  microsoft/agent-governance-toolkit#3892 · Filter by author henyi-tdca opened on Sep 7, 2026
  2

• #310 was closed as completed, but no Windows test job exists in .github/workflows

  microsoft/agent-governance-toolkit#3884 · Filter by author tomek89wo-ops opened on Sep 3, 2026
  1

• claude-code: allow policies to configure the hardcoded guard context preamble

  microsoft/agent-governance-toolkit#3836 · Filter by author talosrobotics opened on Aug 25, 2026

• docs: stable per-control anchors in compliance mappings so external standards can deep link

  needs-review:HIGH
  microsoft/agent-governance-toolkit#3811 · Filter by author imran-siddique opened on Aug 24, 2026
  3

• [Feature]: define Web-standard edge-runtime conformance for TypeScript policy enforcement

  enhancementneeds-review:MEDIUMtriage
  microsoft/agent-governance-toolkit#3808 · Filter by author Knapp-Kevin opened on Aug 24, 2026
  2

• [Feature]: add out-of-band activation evidence for OpenCode governance

  needs-review:MEDIUMstale
  microsoft/agent-governance-toolkit#3708 · Filter by author kerberosmansour opened on Aug 11, 2026
  2

• RFC: Rust SDK production parity — governed data plane, workflow enforcement, and native integrations

  needs-review:MEDIUM
  microsoft/agent-governance-toolkit#3680 · Filter by author kerberosmansour opened on Aug 10, 2026
  2

• [Security]: upgrade js-yaml to 4.3.1 or remove it from the OpenCode path

  needs-review:MEDIUM
  microsoft/agent-governance-toolkit#3671 · Filter by author kerberosmansour opened on Aug 10, 2026
  1

• [Feature]: optionally scrub hidden instruction carriers from tool output

  needs-review:MEDIUMstale
  microsoft/agent-governance-toolkit#3670 · Filter by author kerberosmansour opened on Aug 10, 2026
  2

• [Bug]: lint-policy accepts a rule whose condition can never match, and the evaluator silently applies the default

  bugtriage
  microsoft/agent-governance-toolkit#3661 · Filter by author hlinor-systems opened on Aug 10, 2026
  7