Skip to content

v0.12.0 — Microsoft AGT integration first-class (PR #2610 merged)

Choose a tag to compare

@craigamcw craigamcw released this 28 May 08:53

Microsoft's Agent Governance Toolkit just landed our PR.
microsoft/agent-governance-toolkit#2610 — adding proof_artefact and verification_pointers carry-through on AGT's BackendDecision so high-assurance external policy backends can attach offline-verifiable evidence to the AGT audit chain — merged upstream at 25abf72 on 2026-05-27 by Microsoft maintainer Imran Siddique.

raucle-detect v0.12.0 ships the first-class integration that consumes the new contract.

What's new

RauclePolicyBackend

from agent_os.policies.evaluator import PolicyEvaluator
from raucle_detect.integrations.agt_backend import RauclePolicyBackend
from raucle_detect.capability import CapabilityGate, CapabilityIssuer

issuer = CapabilityIssuer.generate(issuer="acme.bank.kyc-platform")
gate   = CapabilityGate(trusted_issuers={issuer.key_id: issuer.public_key_pem})

evaluator = PolicyEvaluator()
evaluator.add_backend(RauclePolicyBackend(
    gate=gate,
    verification_base_url="https://acme.bank",
))

Every BackendDecision raucle returns now carries:

  • proof_artefact — the cited policy-proof hash (SMT-verified, content-addressed)
  • verification_pointers{issuer_pubkey, policy_registry, lean_development} URLs where an external auditor can fetch the deploying organisation's published material and re-verify the decision offline

AGT's PolicyEvaluator propagates both into PolicyDecision.audit_entry, so any AGT audit-chain consumer gets offline-verifiable evidence on every raucle-rendered decision automatically.

Graceful degradation

The backend detects at construction whether the installed AGT carries the merged fields. On pre-merge AGT installs, verdicts remain correct; the evidence fields are silently dropped. No code changes required for users straddling the upgrade.

Tests

7 new tests in tests/test_agt_backend.py. Skipped automatically when agent_os is not installed; passing 7/7 against microsoft/agent-governance-toolkit@main post-merge.

Deprecation

The pre-merge raucle_detect.integrations.agt stub module is deprecated; remove in v0.13.0. New consumers use raucle_detect.integrations.agt_backend.RauclePolicyBackend.

Where this sits

This is the second of three Microsoft-stack integrations.

  • v0.11.0 — Agent Framework FunctionMiddleware. ✅
  • v0.12.0 — AGT ExternalPolicyBackend. ✅ shipped here.
  • v0.13.0 — Azure AI Foundry MCP Gateway sidecar (recorded walkthrough in progress).

🤖 Generated with Claude Code