mkdocs.yml

site_name: Agent Governance Toolkit
site_description: Governance, trust, identity, and compliance for AI agents
site_url: https://microsoft.github.io/agent-governance-toolkit
repo_url: https://github.com/microsoft/agent-governance-toolkit
repo_name: microsoft/agent-governance-toolkit
edit_uri: edit/main/docs/
docs_dir: docs
exclude_docs: |
  AGENTS.md
  adr/0000-template.md
  adr/README.md
  assets/partners/README.md
  benchmarks/governance-overhead.md
  case-studies/TEMPLATE.md
  dependency-audits/**
  deployment/README.md
  security/tenant-isolation-checklist.md
  slo/**
  tutorials/README.md
not_in_nav: |
  i18n/**
  proposals/*-DESIGN.md
  proposals/*-PROPOSAL.md
  proposals/MXC-SANDBOX-PROVIDER.md
  proposals/NONO-SANDBOX-PROVIDER.md
  proposals/azure-aca-sandbox.md
  proposals/folder-level-governance.md
  proposals/verifiable-compliance-receipts.md
  package-consolidation/**
  package-migration.md
  security/audits/20*.md
copyright: Made responsibly with 💜 by Microsoft

theme:
  name: material
  logo: assets/agent-governance-toolkit.svg
  favicon: assets/agent-governance-toolkit.svg
  custom_dir: docs/overrides
  palette:
    - scheme: slate
      primary: custom
      accent: custom
      toggle:
        icon: material/brightness-4
        name: Switch to light mode
    - scheme: default
      primary: custom
      accent: custom
      toggle:
        icon: material/brightness-7
        name: Switch to dark mode
  features:
    - navigation.instant
    - navigation.tracking
    - navigation.tabs
    - navigation.tabs.sticky
    - navigation.sections
    - navigation.top
    - navigation.path
    - search.suggest
    - search.highlight
    - content.code.copy
    - content.tabs.link
    - toc.follow
    - header.autohide
  icon:
    repo: fontawesome/brands/github
  font: false  # Use Primer system font stack from mslearn.css; skip Google Fonts fetch.

plugins:
  - search
  - minify:
      minify_html: true

markdown_extensions:
  - admonition
  - pymdownx.details
  - pymdownx.superfences:
      custom_fences:
        - name: mermaid
          class: mermaid
          format: !!python/name:pymdownx.superfences.fence_code_format
  - pymdownx.tabbed:
      alternate_style: true
  - pymdownx.highlight:
      anchor_linenums: true
      linenums: true
      linenums_style: pymdownx-inline
      line_spans: __span
      pygments_lang_class: true
  - pymdownx.inlinehilite
  - pymdownx.snippets
  - pymdownx.emoji:
      emoji_index: !!python/name:material.extensions.emoji.twemoji
      emoji_generator: !!python/name:material.extensions.emoji.to_svg
  - attr_list
  - md_in_html
  - tables
  - toc:
      permalink: true

extra:
  social:
    - icon: fontawesome/brands/github
      link: https://github.com/microsoft/agent-governance-toolkit
  generator: false
  # Header language switcher (globe icon → dropdown).
  # Each entry links to the translated landing page; clicking the active
  # language returns the user to the English root.
  alternate:
    - name: English
      link: ./
      lang: en
    - name: 日本語
      link: i18n/README.ja/
      lang: ja
    - name: 한국어
      link: i18n/README.ko/
      lang: ko
    - name: 简体中文
      link: i18n/README.zh-CN/
      lang: zh-Hans
    - name: 繁體中文
      link: i18n/README.zh-TW/
      lang: zh-Hant

extra_css:
  - stylesheets/mslearn.css

extra_javascript:
  - javascripts/site.js

nav:
  - Home: index.md
  - Getting Started:
    - Quick Start: quickstart.md
    - Architecture: ARCHITECTURE.md
    - Glossary: GLOSSARY.md
    - Workshop:
      - Overview: workshop/README.md
      - Prerequisites: workshop/prerequisites.md
      - Lab Guide: workshop/lab-guide.md
      - Facilitator Notes: workshop/facilitator-notes.md
      - Slides: workshop/slides.md
  - Packages:
    - Package guide: packages/index.md
    - Agent Control Specification: packages/agent-control-specification.md
    - Standalone packages:
      - Agent Marketplace: packages/agent-marketplace.md
      - Agent Lightning: packages/agent-lightning.md
    - SDKs and developer tools:
      - .NET package: packages/dotnet-sdk.md
      - VS Code Extension: packages/agent-os-vscode.md
      - Antigravity CLI governance: packages/antigravity-cli-governance.md
      - Claude Code governance: packages/claude-code-governance.md
      - Copilot CLI governance: packages/copilot-cli-governance.md
      - OpenCode CLI governance: packages/opencode-governance.md
    - Compatibility component docs:
      - Agent OS: packages/agent-os.md
      - Agent Mesh: packages/agent-mesh.md
      - Agent Runtime: packages/agent-runtime.md
      - Agent SRE: packages/agent-sre.md
      - Agent Hypervisor: packages/agent-hypervisor.md
      - Legacy unified installer: packages/agent-compliance.md
  - Agent Skills:
    - Overview: skills/index.md
    - AGT policy authoring: skills/agt-policy-authoring/SKILL.md
  - Tutorials:
    - Overview: tutorials/index.md
    - Policy Engine: tutorials/01-policy-engine.md
    - Trust & Identity: tutorials/02-trust-and-identity.md
    - Framework Integrations: tutorials/03-framework-integrations.md
    - Audit & Compliance: tutorials/04-audit-and-compliance.md
    - Agent Reliability: tutorials/05-agent-reliability.md
    - Execution Sandboxing: tutorials/06-execution-sandboxing.md
    - MCP Security Gateway: tutorials/07-mcp-security-gateway.md
    - Agent Control Specification: tutorials/55-agent-control-specification.md
    - OPA / Rego / Cedar Policies: tutorials/08-opa-rego-cedar-policies.md
    - Prompt Injection Detection: tutorials/09-prompt-injection-detection.md
    - Plugin Marketplace: tutorials/10-plugin-marketplace.md
    - Saga Orchestration: tutorials/11-saga-orchestration.md
    - Observability & Tracing: tutorials/13-observability-and-tracing.md
    - Kill Switch & Rate Limiting: tutorials/14-kill-switch-and-rate-limiting.md
    - RL Training Governance: tutorials/15-rl-training-governance.md
    - Protocol Bridges: tutorials/16-protocol-bridges.md
    - Advanced Trust: tutorials/17-advanced-trust-and-behavior.md
    - Compliance Verification: tutorials/18-compliance-verification.md
    - .NET package: tutorials/19-dotnet-sdk.md
    - C# MCP extension: tutorials/42-csharp-mcp-extension.md
    - TypeScript package: tutorials/20-typescript-sdk.md
    - Rust crate: tutorials/21-rust-sdk.md
    - Go module: tutorials/22-go-sdk.md
    - Delegation Chains: tutorials/23-delegation-chains.md
    - Cost & Token Budgets: tutorials/24-cost-and-token-budgets.md
    - Security Hardening: tutorials/25-security-hardening.md
    - SBOM & Signing: tutorials/26-sbom-and-signing.md
    - MCP Scan CLI: tutorials/27-mcp-scan-cli.md
    - Build Custom Integration: tutorials/28-build-custom-integration.md
    - Agent Discovery: tutorials/29-agent-discovery.md
    - Agent Lifecycle: tutorials/30-agent-lifecycle.md
    - Entra Agent ID Bridge: tutorials/31-entra-agent-id-bridge.md
    - E2E Encrypted Messaging: tutorials/32-e2e-encrypted-messaging.md
    - Offline Verifiable Receipts: tutorials/33-offline-verifiable-receipts.md
    - MAF Integration: tutorials/34-maf-integration.md
    - Policy Composition: tutorials/35-policy-composition.md
    - Two-Line Governance: tutorials/36-govern-quickstart.md
    - Multi-Stage Policy Pipeline: tutorials/37-multi-stage-pipeline.md
    - Approval Workflows: tutorials/38-approval-workflows.md
    - DLP Attribute Ratchets: tutorials/39-dlp-attribute-ratchets.md
    - OpenTelemetry Observability: tutorials/40-otel-observability.md
    - Advisory Defense in Depth: tutorials/41-advisory-defense-in-depth.md
    - .NET MAF Hook Integration: tutorials/43-dotnet-maf-hook-integration.md
    - A2A Conversation Policy: tutorials/44-a2a-conversation-policy.md
    - Shift-Left Governance: tutorials/45-shift-left-governance.md
    - Copilot CLI Governance: tutorials/46-copilot-cli-governance.md
    - Red-Team Testing: tutorials/47-red-team-testing.md
    - Intent-Based Authorization: tutorials/48-intent-based-authorization.md
    - Multi-Agent Policies: tutorials/49-multi-agent-policies.md
    - Decision BOM: tutorials/50-decision-bom.md
    - Cost Governance: tutorials/51-cost-governance.md
    - Chaos Testing Agents: tutorials/52-chaos-testing-agents.md
    - Contributor Governance: tutorials/53-contributor-governance.md
    - Antigravity CLI Governance: tutorials/52-antigravity-cli-governance.md
    - OpenCode CLI Governance: tutorials/54-opencode-cli-governance.md
    - Progressive Governance: tutorials/progressive-governance.md
    - Retrofit Governance: tutorials/retrofit-governance.md
    - Policy as Code:
      - Your First Policy: tutorials/policy-as-code/01-your-first-policy.md
      - Capability Scoping: tutorials/policy-as-code/02-capability-scoping.md
      - Rate Limiting: tutorials/policy-as-code/03-rate-limiting.md
      - Conditional Policies: tutorials/policy-as-code/04-conditional-policies.md
      - Approval Workflows: tutorials/policy-as-code/05-approval-workflows.md
      - Policy Testing: tutorials/policy-as-code/06-policy-testing.md
      - Policy Versioning: tutorials/policy-as-code/07-policy-versioning.md
      - MCP Governance Policies: tutorials/policy-as-code/mcp-governance.md
    - Integration Guides:
      - Citadel: integrations/citadel-integration.md
      - External Operation Accountability: integrations/external-operation-accountability-profiles.md
      - MCP Trust: integrations/mcp-trust-guide.md
  - Deployment:
    - Overview: deployment/index.md
    - Azure Container Apps: deployment/azure-container-apps.md
    - Azure Foundry Agent Service: deployment/azure-foundry-agent-service.md
    - AWS ECS / Fargate: deployment/aws-ecs.md
    - Google Cloud GKE: deployment/gcp-gke.md
    - OpenClaw Sidecar: deployment/openclaw-sidecar.md
    - Private Endpoints: deployment/private-endpoints.md
  - Security:
    - Overview: security/index.md
    - OWASP Compliance: security/owasp-compliance.md
    - Threat Model: security/threat-model.md
    - Security Scanning: security/scanning.md
    - Tenant Isolation: security/tenant-isolation.md
    - Context Accumulation Governance: security/context-accumulation-governance.md
    - Trust Score Calibration: security/trust-score-calibration.md
    - Audits: security/audits/README.md
    - Policy Guides:
      - AI Security Guidance: policies/ai-security-guidance.md
      - Autonomous Contributions: policies/autonomous-contributions.md
    - Reporting a Vulnerability: security/disclosure.md
  - Compliance:
    - Overview: compliance/index.md
    - OWASP ASI 2026 (Reference Architecture): compliance/owasp-agentic-top10-architecture.md
    - OWASP ASI Policy-Rule Mapping: compliance/owasp-asi-policy-mapping.md
    - OWASP LLM Top 10: compliance/owasp-llm-top10-mapping.md
    - OWASP MCP Top 10: compliance/mcp-owasp-top10-mapping.md
    - NSA MCP Alignment: compliance/nsa-mcp-alignment.md
    - NIST AI RMF Alignment: compliance/nist-ai-rmf-alignment.md
    - NIST RFI 2026-00206: compliance/nist-rfi-2026-00206.md
    - EU AI Act Checklist: compliance/eu-ai-act-checklist.md
    - SOC 2 Mapping: compliance/soc2-mapping.md
    - ISO/IEC 42001 Mapping: compliance/iso-42001-mapping.md
    - CIS Controls v8.1 Mapping: compliance/cis-controls-v81-mapping.md
    - CSA Agentic Trust Framework: compliance/atf-conformance-assessment.md
    - FRIA Template: compliance/fria-template.md
    - Impact Assessment Template: compliance/impact-assessment-template.md
    - Incident Response Workflow: compliance/incident-response-workflow.md
    - Post-Market Monitoring: compliance/post-market-monitoring.md
    - Record Retention Policy: compliance/record-retention-policy.md
    - Data Provenance Model: compliance/data-provenance-model.md
  - Conformance: conformance.md
  - Studio:
    - Engine API Contract: studio/engine-api-contract.md
  - Specifications:
    - "Agent OS Policy Engine": specs/AGENT-OS-POLICY-ENGINE-1.0.md
    - "Framework Adapter Contract": specs/FRAMEWORK-ADAPTER-CONTRACT-1.0.md
    - "AgentMesh Identity & Trust": specs/AGENTMESH-IDENTITY-TRUST-1.0.md
    - "Agent Hypervisor Execution Control": specs/AGENT-HYPERVISOR-EXECUTION-CONTROL-1.0.md
    - "AgentMesh Trust & Coordination": specs/AGENTMESH-TRUST-COORDINATION-1.0.md
    - "AgentMesh Wire Protocol": specs/AGENTMESH-WIRE-1.0.md
    - "Agent SRE Governance": specs/AGENT-SRE-GOVERNANCE-1.0.md
    - "MCP Security Gateway": specs/MCP-SECURITY-GATEWAY-1.0.md
    - "Agent Lightning Fast-Path": specs/AGENT-LIGHTNING-FAST-PATH-1.0.md
    - "Audit & Compliance": specs/AUDIT-COMPLIANCE-1.0.md
  - Architecture Decisions:
    - Overview: adr/index.md
    - "ADR-0001: Ed25519 for Identity": adr/0001-use-ed25519-for-agent-identity.md
    - "ADR-0002: Four Execution Rings": adr/0002-use-four-execution-rings-for-runtime-privilege.md
    - "ADR-0003: IATP Handshake 200ms": adr/0003-keep-iatp-handshake-within-200ms.md
    - "ADR-0004: Deterministic Policy": adr/0004-keep-policy-evaluation-deterministic.md
    - "ADR-0005: Liveness Attestation": adr/0005-add-liveness-attestation-to-trust-handshake.md
    - "ADR-0006: Constitutional Constraints": adr/0006-constitutional-constraint-layer-as-community-extension.md
    - "ADR-0007: JWKS Federation": adr/0007-external-jwks-federation-for-cross-org-identity.md
    - "ADR-0008: Cross-Org Policy Federation": adr/0008-cross-org-policy-federation.md
    - "ADR-0009: RFC 9334 RATS Alignment": adr/0009-rfc-9334-rats-architecture-alignment.md
    - "ADR-0010: TEE Keystore SEV-SNP": adr/0010-tee-keystore-sevsnp-attestation.md
    - "ADR-0011: Additive Policy Contract": adr/0011-additive-policy-check-contract.md
    - "ADR-0012: Cost Governance": adr/0012-cost-governance-observability-policies.md
    - "ADR-0013: Fail Closed on Errors": adr/0013-fail-closed-on-policy-evaluation-errors.md
    - "ADR-0014: Parent Deny Immutable": adr/0014-parent-deny-rules-immutable-in-merge.md
    - "ADR-0015: Pluggable Policy Backends": adr/0015-pluggable-external-policy-backends.md
    - "ADR-0016: Trust Ceiling Propagation": adr/0016-trust-ceiling-propagation-for-delegation.md
    - "ADR-0017: Merkle Audit Chain": adr/0017-merkle-chain-for-audit-tamper-evidence.md
    - "ADR-0018: Reconstructible Decision BOM": adr/0018-reconstructible-decision-bom-over-prebuilt.md
    - "ADR-0019: OTel Event Sink Pattern": adr/0019-otel-batchspanprocessor-pattern-for-event-sink.md
    - "ADR-0020: Circuit Breaker for Sinks": adr/0020-circuit-breaker-for-event-sink-delivery.md
    - "ADR-0021: CloudEvents Envelope": adr/0021-cloudevents-envelope-for-mesh-audit.md
    - "ADR-0022: Compliance Auto-Mapping": adr/0022-compliance-framework-auto-mapping.md
    - "ADR-0023: Hypervisor Delta Engine": adr/0023-append-only-delta-engine-for-hypervisor-audit.md
    - "ADR-0024: RL Training Governance": adr/0024-rl-training-governance-with-violation-penalties.md
    - "ADR-0025: Structural Typing Protocols": adr/0025-structural-typing-for-sink-and-source-protocols.md
    - "ADR-0026: Foundry AI Gateway Functions PDP": adr/0026-foundry-ai-gateway-functions-pdp.md
    - "ADR-0027: Dual-Stack MCP Migration": adr/0027-adopt-dual-stack-migration-for-mcp-2026-07-28.md
    - "ADR-0028: AGT Studio Unified UI": adr/0028-agt-studio-unified-ui.md
    - "ADR-0029: Policy Distribution and Registries": adr/0029-policy-distribution-and-registries.md
    - "ADR-0030: Action-Bound Approval Protocol": adr/0030-action-bound-approval-protocol.md
    - "ADR-0031: Optional Embedding Detection": adr/0031-optional-embedding-detection-backend.md
    - "ADR-0032: Trace v0.1 Trust Records": adr/0032-agt-emits-trace-v01-trust-records.md
    - Proposals: proposals/README.md
  - Reference:
    - Project:
      - Adopters: ADOPTERS.md
      - Technical Charter: CHARTER.md
      - Community: COMMUNITY.md
      - FAQ: FAQ.md
      - Governance: GOVERNANCE.md
      - Independence: INDEPENDENCE.md
      - Limitations: LIMITATIONS.md
      - Maintainers: MAINTAINERS.md
      - Roadmap: ROADMAP.md
    - Engineering:
      - Error Handling: ERROR_HANDLING.md
      - Integration Tiers: integration-tiers.md
      - Package Feature Matrix: PACKAGE-FEATURE-MATRIX.md
      - Publishing: PUBLISHING.md
      - Release Process: RELEASE.md
      - RFC Process: RFC_PROCESS.md
      - Testing Guide: TESTING_GUIDE.md
      - V4 Removal: v4-removal.md
      - Wire Protocol Facets: WIRE-PROTOCOL-FACETS.md
    - Architecture:
      - Modern Agent Architecture: modern-agent-architecture-overview.md
      - Agent 365 Reference Architecture: a365-agt-reference-architecture.md
    - Benchmarks:
      - Governance Overhead: reference/benchmarks.md
      - Benchmark Catalog: BENCHMARKS.md
      - Prompt Injection Evaluation: benchmarks/prompt-injection-evaluation.md
      - Prompt Injection Methodology: benchmarks/prompt-injection-methodology.md
    - Comparisons:
      - Current Comparison: reference/comparison.md
      - Extended Comparison: COMPARISON.md
    - Case Studies:
      - Ecommerce Customer Service: case-studies/sample-ecommerce-customer-service.md
      - Financial Trading Compliance: case-studies/sample-financial-trading-compliance.md
      - Healthcare Prior Authorization: case-studies/sample-healthcare-prior-authorization.md
    - Operations:
      - Advisory to Blocking Graduation: operations/advisory-to-blocking-graduation.md
      - Pre-Commit Hook Template: operations/pre-commit-hook-template.md
    - Release Notes:
      - v1.0.0: releases/RELEASE_NOTES_v1.0.0.md
      - v2.1.0: releases/RELEASE_NOTES_v2.1.0.md
      - v2.2.0: releases/RELEASE_NOTES_v2.2.0.md
      - v2.3.0: releases/RELEASE_NOTES_v2.3.0.md
      - v3.0.0: releases/RELEASE_NOTES_v3.0.0.md
      - v3.1.0: releases/RELEASE_NOTES_v3.1.0.md
      - v3.1.1: releases/RELEASE_NOTES_v3.1.1.md
      - v3.2.0: releases/RELEASE_NOTES_v3.2.0.md
      - v3.6.0: releases/RELEASE_NOTES_v3.6.0.md
      - v3.7.0: releases/RELEASE_NOTES_v3.7.0.md
    - NIST RFI Mapping: reference/nist-rfi-mapping.md
    - Changelog: reference/changelog.md
    - Contributing: reference/contributing.md