Issues

• fix(agentmesh-mcp): prevent Rust MCP signature field reframing

  bugPriority: HIGHsecurity
  microsoft/agent-governance-toolkit#4199 · Filter by author Ricky-G opened on Oct 1, 2026

• [Feature]: agent-mesh tests for attempt counts on lost-response retries

  needs-review:HIGH
  microsoft/agent-governance-toolkit#4198 · Filter by author astrogilda opened on Sep 30, 2026
  1

• [Bug]: Claude Code plugin: recursive-delete rule never matches rm -rf (fix from #3834 never merged)

  bugtriage
  microsoft/agent-governance-toolkit#4178 · Filter by author noq0 opened on Sep 28, 2026
  1

• [Bug]: Agent-mesh: handle policy engine exceptions in PolicyProviderHandler

  bugneeds-review:MEDIUMtriage
  microsoft/agent-governance-toolkit#4172 · Filter by author DhineshPonnarasan opened on Sep 28, 2026
  1

• [Bug]: mcp-receipt-governed: verify_receipts.py reports unsigned chains as "signatures are valid" (exit 0); verify_receipt_chain treats trusted_keys=[] as no constraint

  needs-review:HIGH
  microsoft/agent-governance-toolkit#4165 · Filter by author robertolocatelli81-dev opened on Sep 27, 2026
  2

• [Bug]: Python SDK small correctness and ergonomics findings (tracking)

  bugneeds-review:MEDIUMtriage
  microsoft/agent-governance-toolkit#4048 · Filter by author david-long1 opened on Sep 20, 2026
  4

• [Bug]: HostSession sends model/messages/response snapshot keys, but the snapshot contract and the adapters use model_request/model_response/output

  bugneeds-review:MEDIUMtriage
  microsoft/agent-governance-toolkit#4047 · Filter by author david-long1 opened on Sep 20, 2026
  1

• agent-governance-toolkit-core[migrate] extra pins an unresolvable agt-policies range

  microsoft/agent-governance-toolkit#4019 · Filter by author karimad opened on Sep 17, 2026

• [Bug]: Compliance reports conflate unassessed controls with satisfied controls

  bugneeds-review:MEDIUMtriage
  microsoft/agent-governance-toolkit#3957 · Filter by author halvrenofviryel opened on Sep 14, 2026
  1

• policy-engine: core shim version 0.3.1-beta.0 collides with the old embedded engine already on crates.io

  microsoft/agent-governance-toolkit#3946 · Filter by author MohammadHaroonAbuomar opened on Sep 13, 2026

• policy-engine: AgentControl::new(runtime) leaves parts=None, making with_telemetry a no-op and revalidating against Limits::default

  microsoft/agent-governance-toolkit#3941 · Filter by author MohammadHaroonAbuomar opened on Sep 13, 2026
  1

• RFC: define the verified approver assertion (MCP-SECURITY-GATEWAY-1.0 §4.3 and ADR-0030)

  triage
  microsoft/agent-governance-toolkit#3918 · Filter by author dvanostrand opened on Sep 9, 2026
  1

• BackendRegistry / OPAPolicyBackend / CedarPolicyBackend are never consulted by govern() - registering a backend is a silent no-op

  microsoft/agent-governance-toolkit#3911 · Filter by author fer-marino opened on Sep 9, 2026
  1

• AGT Studio: package + CI scaffold + CODEOWNERS (Epic 1a, issue 5/32)

  agent-governancearchitectureci/cdenhancement
  microsoft/agent-governance-toolkit#3898 · Filter by author Ricky-G opened on Sep 7, 2026 · AGT Studio
  3

• #310 was closed as completed, but no Windows test job exists in .github/workflows

  microsoft/agent-governance-toolkit#3884 · Filter by author tomek89wo-ops opened on Sep 3, 2026
  1

• claude-code: allow policies to configure the hardcoded guard context preamble

  microsoft/agent-governance-toolkit#3836 · Filter by author talosrobotics opened on Aug 25, 2026

• docs: stable per-control anchors in compliance mappings so external standards can deep link

  needs-review:HIGH
  microsoft/agent-governance-toolkit#3811 · Filter by author imran-siddique opened on Aug 24, 2026
  1

• [Feature]: define Web-standard edge-runtime conformance for TypeScript policy enforcement

  enhancementneeds-review:MEDIUMtriage
  microsoft/agent-governance-toolkit#3808 · Filter by author Knapp-Kevin opened on Aug 24, 2026
  1

• [Feature]: add out-of-band activation evidence for OpenCode governance

  needs-review:MEDIUM
  microsoft/agent-governance-toolkit#3708 · Filter by author kerberosmansour opened on Aug 11, 2026
  1

• [Bug]: OpenCode workspace install uses an undiscoverable .mjs shim and stale hook documentation

  needs-review:MEDIUM
  microsoft/agent-governance-toolkit#3707 · Filter by author kerberosmansour opened on Aug 11, 2026
  2

• RFC: Rust SDK production parity — governed data plane, workflow enforcement, and native integrations

  needs-review:MEDIUM
  microsoft/agent-governance-toolkit#3680 · Filter by author kerberosmansour opened on Aug 10, 2026
  2

• [Security]: upgrade js-yaml to 4.3.1 or remove it from the OpenCode path

  needs-review:MEDIUM
  microsoft/agent-governance-toolkit#3671 · Filter by author kerberosmansour opened on Aug 10, 2026
  1

• [Feature]: optionally scrub hidden instruction carriers from tool output

  needs-review:MEDIUM
  microsoft/agent-governance-toolkit#3670 · Filter by author kerberosmansour opened on Aug 10, 2026
  1

• [Feature]: make secret patterns configurable and add common token formats

  needs-review:MEDIUM
  microsoft/agent-governance-toolkit#3667 · Filter by author kerberosmansour opened on Aug 10, 2026
  1

• [Bug]: lint-policy accepts a rule whose condition can never match, and the evaluator silently applies the default

  bugtriage
  microsoft/agent-governance-toolkit#3661 · Filter by author hlinor-systems opened on Aug 10, 2026
  5