CRE-AgentProtect

Open-source HookBus adapter for Microsoft's Agent Governance Toolkit (AGT).

MIT-licensed. Full source on GitHub. One Python file that translates HookBus normalised events into Microsoft AGT SemanticPolicyEngine.classify() calls and translates the verdicts back to HookBus responses.

---

What this is (and what it is not)

CRE-AgentProtect is an adapter, not a fork. Microsoft AGT is a Microsoft project, MIT-licensed by Microsoft Corporation. CRE-AgentProtect is the bridge between any HookBus publisher and AGT's SemanticPolicyEngine. We:

• do not vendor, redistribute, or modify AGT source code
• do not claim any rights, patents, or copyrights in AGT
• do not claim affiliation with, endorsement by, or partnership with Microsoft
• do depend on AGT as an upstream runtime dependency (pip install agent-os-kernel)

Microsoft maintains the engine. Agentic Thinking maintains the adapter.

If Microsoft ships their own HookBus-compatible adapter tomorrow, use theirs. This exists because today HookBus publishers need a zero-friction bridge to AGT and none existed.

---

Install (60 seconds)

One shell command installs CRE-AgentProtect as part of the HookBus stack, together with the bus and AgentSpend. Interactive menu lets you pick a publisher shim for your agent runtime.

curl -fsSL https://agenticthinking.uk/install.sh | bash

Non-interactive variants:

# Hermes-agent users
curl -fsSL https://agenticthinking.uk/install.sh | bash -s -- --runtime hermes

# OpenClaw users
curl -fsSL https://agenticthinking.uk/install.sh | bash -s -- --runtime openclaw

# Bus + subscribers only, skip publisher
curl -fsSL https://agenticthinking.uk/install.sh | bash -s -- --runtime skip --noninteractive

The script prints the dashboard URL + bearer token on completion. Re-run any time, it is idempotent.

Prefer not to pipe curl to bash? Inspect first: curl -fsSL https://agenticthinking.uk/install.sh > install.sh && less install.sh && bash install.sh

---

Manual install

If you prefer to see every step, or you are building an immutable / reproducible deployment, here is the full manual install.

CRE-AgentProtect is designed as a subscriber on a HookBus stack. The easiest way to run it is via the HookBus quickstart, which builds this image alongside the bus and wires it as a subscriber:

# Follow the HookBus quickstart:
#   https://github.com/agentic-thinking/hookbus#quick-start-60-seconds

Build the image on its own if you are wiring CRE-AgentProtect into an existing HookBus deployment:

git clone https://github.com/agentic-thinking/cre-agentprotect.git
cd cre-agentprotect
docker build -t agentic-thinking/cre-agentprotect:latest .

docker run -d --name cre-agentprotect \
  -v hookbus-auth:/root/.hookbus:ro \
  -p 8878:8878 \
  agentic-thinking/cre-agentprotect:latest

Then add it to subscribers.yaml:

- name: cre-agentprotect
  type: sync
  transport: http
  address: http://cre-agentprotect:8878
  events: [PreToolUse, PostToolUse, PostLLMCall]

What CRE-AgentProtect does

Event	Behaviour
PreToolUse	Classifies tool call via AGT, denies on DESTRUCTIVE_DATA / DATA_EXFILTRATION / PRIVILEGE_ESCALATION / SYSTEM_MODIFICATION above confidence threshold
PostToolUse	Allows + observes
Other	Allows

Scope

For the enterprise tier, see agenticthinking.uk.

Configuration

Env var	Default	Purpose
CRE_AGENTPROTECT_HOST	0.0.0.0	Bind address
CRE_AGENTPROTECT_PORT	8878	Bind port
CRE_AGENTPROTECT_CONFIDENCE_THRESHOLD	0.5	Minimum AGT confidence to deny

Licensing

Layer	Licence	Holder
This adapter (CRE-AgentProtect)	MIT	© 2026 Agentic Thinking Limited
Microsoft AGT (upstream dependency)	MIT	© Microsoft Corporation
HookBus envelope schema	CC0 1.0 (public domain)	Defensively published, Zenodo DOI 10.5281/zenodo.19642020

MIT covers only the adapter code in this repository. Microsoft AGT remains under Microsoft's MIT licence; nothing here re-licenses or overrides that. CRE-AgentProtect is a thin one-layer adapter, so MIT is the cleanest fit and matches the AGT upstream.

Trademarks & attribution

• Microsoft and Agent Governance Toolkit (AGT) are trademarks of Microsoft Corporation. Used here nominatively, solely to identify the upstream project this adapter depends on. No affiliation with, endorsement by, or sponsorship from Microsoft Corporation is claimed or implied.
• HookBus™ is a trademark (common-law) of Agentic Thinking Limited.

Contributing

PRs welcome for:

• Additional backends (OPA, Asqav, Casbin, custom)
• Metadata passthrough (organisation ID, user ID, session info)
• Confidence threshold tuning per category
• Integration tests

Before submitting a PR, sign the CLA (see /CLA.md once released).

---

Built by Agentic Thinking Limited (UK Company 17152930). Contact: contact@agenticthinking.uk