Microsoft AGT Supplemental Overview

This page explains how Qortara Governance relates to the Microsoft Agent Governance Toolkit (AGT). AGT is an upstream technical dependency. It is not a partner, a certifier, or a competitor, and nothing here implies any endorsement or affiliation in either direction.

What AGT Is

The Microsoft Agent Governance Toolkit is an open-source (MIT) runtime for governing AI agents, currently in Public Preview. It enforces policy deterministically: every tool call, resource access, and inter-agent message is evaluated against policy before it executes. Enforcement is the core, and AGT pairs it with zero-trust agent identity, execution sandboxing, saga orchestration, a kill switch, tamper-evident (Merkle) audit logging, an MCP security gateway, and reliability tooling. It ships SDKs across Python, TypeScript, .NET, Rust, and Go, and covers the OWASP Agentic Top 10.

Because AGT sits between an agent framework and the actions agents take, it provides a consistent governance point regardless of which framework an application is built on.

You can find the upstream project here:

> Source repository: https://github.com/microsoft/agent-governance-toolkit > > License: MIT (Public Preview, latest v4.0.0)

How Qortara Builds On AGT

Qortara Governance builds on top of AGT. It is not a fork. Qortara depends on the `agent-governance-toolkit` package (currently `>=3.5.0`) and consumes it directly.

The deterministic deny-before-execution enforcement is AGT's, and so are the zero-trust identity, execution sandboxing, saga orchestration, and tamper-evident audit foundation. Qortara inherits them rather than reimplementing them. What Qortara adds is a packaging and product layer on top:

• **A drop-in LangChain and LangGraph sidecar.** `pip install qortara-governance-langchain` wires governance in at the point of tool dispatch with minimal setup, so a developer gets enforced policy without assembling the runtime by hand.
• **A portable trust-attestation lifecycle.** Attest, look up, and verify a signed summary of an agent's governance history, so another organization can reason about it without seeing your policy internals.
• **The hosted Qortara Cloud Governance control plane (pre-launch).** A Cedar-based policy decision point, cross-organization evidence and trust, and fleet visibility beyond a single local runtime.

Building on AGT rather than reimplementing it means Qortara inherits AGT's framework coverage, identity, sandboxing, and audit foundation, and stays aligned with a foundation that other tools in the ecosystem also build on.

Framework Compatibility

Because Qortara Governance sits above AGT's framework-integration layer, it works with the frameworks AGT supports. That includes:

The table above is a representative subset. AGT integrates with more than twenty frameworks and stacks, including Semantic Kernel, the Microsoft Agent Framework, LlamaIndex, and others. As AGT adds support for additional frameworks, that coverage flows through to Qortara Governance. If AGT supports a framework, Qortara aims to support it too.

The published Qortara Governance SDK currently leads with LangChain (and LangGraph). See the [Getting Started](/docs/quickstart) guide for the installable path that works today.

Tracking Upstream Releases

Qortara tracks upstream AGT releases. When AGT publishes a new version, we evaluate it, update the pinned dependency, and adjust our layer where the upstream interfaces change. The goal is to stay current with AGT rather than drift away from it, so improvements and framework additions upstream reach Qortara users without a rewrite.

Provenance

The `upstream*` frontmatter keys on this page record the upstream source this material is checked against, including the repository, path, license, and the pinned upstream version (currently v4.0.0). Qortara's runtime dependency constraint is `agent-governance-toolkit >=3.5.0`.

---

LangChain and LangGraph are trademarks of LangChain, Inc. Microsoft and any related marks are the property of Microsoft Corporation. Qortara is an independent project and is not affiliated with, endorsed by, or sponsored by Microsoft or LangChain, Inc.