Microsoft
-
The Kernel That Isn't: What Microsoft's Agent Governance Toolkit Says About Itself
Microsoft's Agent Governance Toolkit launched as 'the kernel for AI agents.' Its own README now says the policy engine and the agents share a process boundary, its compliance document grades OWASP coverage at seven full and three partial rather than ten, and its limitations file names the gaps in public. Five months later the Windows team shipped containment on the opposite principle, and both sets of documents belong to the same company.
-
The Boundary Went to Silicon. The Breach Went Sideways.
In one month the agent security boundary was shipped three more times: a Windows session, a three-chip reference architecture, and a data-access translation layer. NVIDIA's new policy prover is the interesting part. Its own example of what it cannot yet model is the shape of the breach that started all of this.
-
Where the Guardrail Lives: Microsoft Bundles Governance In, Orca Keeps It Out
Microsoft's Agent Framework is in public preview, and its pitch is governance first: approvals, content safety, and audit logging delivered as part of the platform. The contrast is Orca, which keeps the guardrail outside the agent.