Runtime Governance
-
The Kernel That Isn't: What Microsoft's Agent Governance Toolkit Says About Itself
Microsoft's Agent Governance Toolkit launched as 'the kernel for AI agents.' Its own README now says the policy engine and the agents share a process boundary, its compliance document grades OWASP coverage at seven full and three partial rather than ten, and its limitations file names the gaps in public. Five months later the Windows team shipped containment on the opposite principle, and both sets of documents belong to the same company.
-
The Guardrail Layer Gets Its Specs: ACS, AARM, and the Action-Interception Layer
Microsoft's Agent Control Specification and CSA's AARM both name the runtime-governance layer, from opposite ends. AARM writes mandatory requirements, including universal pre-execution interception and tamper-evident receipts. ACS writes the interface: lifecycle hooks, normalized verdicts, fail-closed enforcement. What was a gap diagnosis now has two competing specs.