Topic
Source-linked workflows that name agent-governance. Part of the AI agent use cases on UsecaseBoard, or browse all use cases.
MIT Python package signs every policy-gated tool call into a hash-chained .tkb file verifiable offline (Python+TS); works across Claude Code, OpenAI Agents, LangChain/LangGraph, MCP and more—agents can edit their own logs but not hide edits when the signer is out of reach.
Apache-2.0 agent-native sandbox (Linux FUSE/Landlock, macOS APFS clones+Seatbelt) gives agents a confined FS view with unified text diffs, binary markers, and per-task or per-tool-call commit/abort—optional JSON-RPC adapters for Pi and policy for secrets/network.
MCP gateway is GA in Red Hat Connectivity Link 1.5 with tenant isolation, progressive tool discovery (discover_tools/select_tools), 2026-07-28 stateless HTTP support, NeMo guardrails on tools/call, audit logs, and Prometheus broker metrics so enterprise agents route governed MCP traffic on OpenShift.
OSS hooks intercept tool calls before execution across ~14 coding agents; observe/enforce policy, secret cloaking, MCP/skill scan, egress allowlists, and a local dashboard.
ServiceNow announced AI Passport (Oct 15): cryptographically signed runtime credentials that authorize what first- and third-party AI agents and MCP servers may do in multi-agent workflows, with graduated restrict/redirect/kill-switch enforcement and NVIDIA Open Agent Safety Platform as launch partner—expected Q4 2026 with shadow AI detection and AI Cost Management.
Standalone Avior on the SolarWinds Platform lets IT teams define measurable goals, coordinate specialized agents across hybrid estates, and act under risk-tiered autonomy (dangerous steps need human approval) with audit trails, rollback, data masking, least-privilege tools, and MCP to third-party systems—available via guided onboarding from Oct 14, 2026.
Agentic Reliability Center GA gives one metered telemetry+LLM door, shared operational memory, and human-in-the-loop policy gates; new MCP lets Claude Code/Cursor/Codex investigate incidents from the IDE while inheriting audit trails and approval gates.
Octopus Cloud ships a built-in HTTP MCP at /mcp so coding agents can list spaces/projects, check PR deployment status, create/promote releases, run runbooks, search task logs and audit events—no per-machine local MCP to install; Server gets it in 2026.3.
Stable open-source Azure MCP 3.0 adds Backup, Resilience, SRE Agent, Terraform/Advisor, Monitor/Cosmos/IoT toolsets plus clearer schemas, --learn, and secure-by-default resource creation so Copilot/Cursor/Claude agents can inspect and plan Azure work with predictable contracts.
Apache-2.0 terminal/VS Code/Zed agent (ACP) runs commands under Seatbelt/bubblewrap so writes stay in project+temp+caches, network is closed unless allowlisted, edits ask first, team policy can't be loosened by a cloned repo, and an outside hash-chained audit log verifies with /audit verify.
Open-source MIT guardrail tracks audience×trust labels across tool calls (algebra, not LLM-as-judge), returns remedy plans (sanitize/authority/subagent) so agents keep ~90% task completion with 0% exfil on their benches—plugs via pre/post tool hooks; docs also as MCP.