The safeguards map / 3.2 Agent harnesses
Microsoft Agent Governance Toolkit
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
An open-source toolkit that checks each agent tool call against a policy in application code before it runs, with YAML policies and Rego or Cedar policies.
Where it sits
3.2 Agent harnesses (primary): Intercepts an agent's tool calls, messages and delegations in application code and allows or denies each against a policy written in YAML, Rego or Cedar.
Every tool call, message send, and delegation is intercepted in deterministic application code
captured
Rego policies reference a bundle and query.
captured
evaluates the YAML policy, logs the decision to an audit trail
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- agentAI system
- Used by
- those who run it
- Runs
- at runtime
- Policy comes from
- owner-entered settingsan imported policy bundle
- Can the agent bypass it
- depends
Handoffs
None recorded.
Listed, not drawn: no documented handoff and no foundation home places it on the map.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.