Issues

• [Bug]: agent-hypervisor check_command misses a denied command behind sudo, doas or xargs (sudo curl, xargs curl)

  needs-review:MEDIUM
  microsoft/agent-governance-toolkit#4358 · Filter by author ShivamSharma43 opened on Oct 18, 2026
  1

• MCP governance: an authenticated principal whose sub is not a DID makes every governed tool call throw ArgumentException ("Invalid AgentMesh DID") instead of being allowed or denied

  needs-review:MEDIUM
  microsoft/agent-governance-toolkit#4357 · Filter by author tzdevelopteam opened on Oct 18, 2026
  4

• [Bug]: SessionScope.is_path_allowed does not normalize relative segments (..) or enforce directory boundaries

  bugneeds-review:HIGHtriage
  microsoft/agent-governance-toolkit#4355 · Filter by author Kaap10 opened on Oct 18, 2026
  2

• feat(redteam): 240-scenario measurement suite with actual detector evidence and reporting

  microsoft/agent-governance-toolkit#4345 · Filter by author jersonboydmilan opened on Oct 17, 2026

• [Bug]: False Positive "Tool_poisoning (critical)" in Claude Code plugin

  bugtriage
  microsoft/agent-governance-toolkit#4343 · Filter by author Saassyuser opened on Oct 16, 2026
  2

• Policy template example: three-law runtime guard (Authority/Autonomy/Accountability) for regulated agent workflows

  needs-review:HIGH
  microsoft/agent-governance-toolkit#4342 · Filter by author stevenzhao07 opened on Oct 16, 2026
  3

• RFC: Optional Governance Substrate v0.7.0 Integration for Verified Execution and Emergency Shutdown

  triage
  microsoft/agent-governance-toolkit#4298 · Filter by author electricwolfemarshmallowhypertext opened on Oct 13, 2026
  1

• [Bug]: agent-mesh PolicyRule splits and/or inside quoted literals, so deny rules match every request and allow rules never match

  needs-review:HIGH
  microsoft/agent-governance-toolkit#4291 · Filter by author Zhuoxi2000 opened on Oct 12, 2026
  5

• AGT Studio: agt serve implementation (Epic 1b, issue 7/32)

  agent-governancearchitectureenhancementsecurity
  microsoft/agent-governance-toolkit#4281 · Filter by author Ricky-G opened on Oct 11, 2026 · AGT Studio
  2

• Proposal: source-rights evidence hook before content-related agent/tool actions

  needs-review:UNKNOWN
  microsoft/agent-governance-toolkit#4230 · Filter by author reflectme-source opened on Oct 5, 2026
  2

• RFC: External institutional authority admission across federated agent runtimes

  triage
  microsoft/agent-governance-toolkit#4217 · Filter by author veraxis-protocol opened on Oct 2, 2026
  4

• fix(agentmesh-mcp): prevent Rust MCP signature field reframing

  bugPriority: HIGHsecurity
  microsoft/agent-governance-toolkit#4199 · Filter by author Ricky-G opened on Oct 1, 2026
  2

• [Feature]: agent-mesh tests for attempt counts on lost-response retries

  needs-review:HIGH
  microsoft/agent-governance-toolkit#4198 · Filter by author astrogilda opened on Sep 30, 2026
  1

• [Bug]: Python SDK small correctness and ergonomics findings (tracking)

  bugneeds-review:MEDIUMtriage
  microsoft/agent-governance-toolkit#4048 · Filter by author david-long1 opened on Sep 20, 2026
  4

• [Bug]: HostSession sends model/messages/response snapshot keys, but the snapshot contract and the adapters use model_request/model_response/output

  bugneeds-review:MEDIUMtriage
  microsoft/agent-governance-toolkit#4047 · Filter by author david-long1 opened on Sep 20, 2026
  1

• agent-governance-toolkit-core[migrate] extra pins an unresolvable agt-policies range

  microsoft/agent-governance-toolkit#4019 · Filter by author karimad opened on Sep 17, 2026

• policy-engine: AgentControl::new(runtime) leaves parts=None, making with_telemetry a no-op and revalidating against Limits::default

  microsoft/agent-governance-toolkit#3941 · Filter by author MohammadHaroonAbuomar opened on Sep 13, 2026
  1

• RFC: define the verified approver assertion (MCP-SECURITY-GATEWAY-1.0 §4.3 and ADR-0030)

  triage
  microsoft/agent-governance-toolkit#3918 · Filter by author dvanostrand opened on Sep 9, 2026
  4

• BackendRegistry / OPAPolicyBackend / CedarPolicyBackend are never consulted by govern() - registering a backend is a silent no-op

  microsoft/agent-governance-toolkit#3911 · Filter by author fer-marino opened on Sep 9, 2026
  1

• AGT Studio: package + CI scaffold + CODEOWNERS (Epic 1a, issue 5/32)

  agent-governancearchitectureci/cdenhancement
  microsoft/agent-governance-toolkit#3898 · Filter by author Ricky-G opened on Sep 7, 2026 · AGT Studio
  3

• Governance-layer gap suggestions: SBOM / context integrity / human-approval middleware

  needs-review:HIGH
  microsoft/agent-governance-toolkit#3892 · Filter by author henyi-tdca opened on Sep 7, 2026
  2

• #310 was closed as completed, but no Windows test job exists in .github/workflows

  microsoft/agent-governance-toolkit#3884 · Filter by author tomek89wo-ops opened on Sep 3, 2026
  1

• claude-code: allow policies to configure the hardcoded guard context preamble

  microsoft/agent-governance-toolkit#3836 · Filter by author talosrobotics opened on Aug 25, 2026

• docs: stable per-control anchors in compliance mappings so external standards can deep link

  needs-review:HIGH
  microsoft/agent-governance-toolkit#3811 · Filter by author imran-siddique opened on Aug 24, 2026
  3

• [Feature]: define Web-standard edge-runtime conformance for TypeScript policy enforcement

  enhancementneeds-review:MEDIUMtriage
  microsoft/agent-governance-toolkit#3808 · Filter by author Knapp-Kevin opened on Aug 24, 2026
  2