mkdocs.yml

site_name: Agent Governance Toolkit
site_description: Governance, trust, identity, and compliance for AI agents
site_url: https://microsoft.github.io/agent-governance-toolkit
repo_url: https://github.com/microsoft/agent-governance-toolkit
repo_name: microsoft/agent-governance-toolkit
edit_uri: edit/main/docs/
docs_dir: docs
copyright: Made responsibly with 💜 by Microsoft

theme:
  name: material
  logo: assets/agent-governance-toolkit.svg
  favicon: assets/agent-governance-toolkit.svg
  custom_dir: docs/overrides
  palette:
    - scheme: default
      primary: custom
      accent: custom
      toggle:
        icon: material/brightness-7
        name: Switch to dark mode
    - scheme: slate
      primary: custom
      accent: custom
      toggle:
        icon: material/brightness-4
        name: Switch to light mode
  features:
    - navigation.instant
    - navigation.tracking
    - navigation.tabs
    - navigation.tabs.sticky
    - navigation.sections
    - navigation.top
    - navigation.path
    - search.suggest
    - search.highlight
    - content.code.copy
    - content.tabs.link
    - toc.follow
    - header.autohide
  icon:
    repo: fontawesome/brands/github
  font: false  # Use Primer system font stack from mslearn.css; skip Google Fonts fetch.

plugins:
  - search
  - minify:
      minify_html: true

markdown_extensions:
  - admonition
  - pymdownx.details
  - pymdownx.superfences:
      custom_fences:
        - name: mermaid
          class: mermaid
          format: !!python/name:pymdownx.superfences.fence_code_format
  - pymdownx.tabbed:
      alternate_style: true
  - pymdownx.highlight:
      anchor_linenums: true
      linenums: true
      linenums_style: pymdownx-inline
      line_spans: __span
      pygments_lang_class: true
  - pymdownx.inlinehilite
  - pymdownx.snippets
  - pymdownx.emoji:
      emoji_index: !!python/name:material.extensions.emoji.twemoji
      emoji_generator: !!python/name:material.extensions.emoji.to_svg
  - attr_list
  - md_in_html
  - tables
  - toc:
      permalink: true

extra:
  social:
    - icon: fontawesome/brands/github
      link: https://github.com/microsoft/agent-governance-toolkit
  generator: false
  # Header language switcher (globe icon → dropdown).
  # Each entry links to the translated landing page; clicking the active
  # language returns the user to the English root.
  alternate:
    - name: English
      link: ./
      lang: en
    - name: 日本語
      link: i18n/README.ja/
      lang: ja
    - name: 한국어
      link: i18n/README.ko/
      lang: ko
    - name: 简体中文
      link: i18n/README.zh-CN/
      lang: zh-Hans
    - name: 繁體中文
      link: i18n/README.zh-TW/
      lang: zh-Hant

extra_css:
  - stylesheets/mslearn.css

extra_javascript:
  - javascripts/site.js

nav:
  - Home: index.md
  - Getting Started:
    - Quick Start: quickstart.md
    - Architecture: ARCHITECTURE.md
    - Glossary: GLOSSARY.md
  - Packages:
    - Overview: packages/index.md
    - Agent OS: packages/agent-os.md
    - Agent Mesh: packages/agent-mesh.md
    - Agent Runtime: packages/agent-runtime.md
    - Agent SRE: packages/agent-sre.md
    - Agent Compliance: packages/agent-compliance.md
    - Agent Marketplace: packages/agent-marketplace.md
    - Agent Lightning: packages/agent-lightning.md
    - Agent Hypervisor: packages/agent-hypervisor.md
    - Agent Control Specification: packages/agent-control-specification.md
    - Antigravity CLI governance package: packages/antigravity-cli-governance.md
    - OpenCode CLI governance package: packages/opencode-governance.md
    - .NET package: packages/dotnet-sdk.md
    - VS Code Extension: packages/agent-os-vscode.md
  - Tutorials:
    - Overview: tutorials/index.md
    - Policy Engine: tutorials/01-policy-engine.md
    - Trust & Identity: tutorials/02-trust-and-identity.md
    - Framework Integrations: tutorials/03-framework-integrations.md
    - Audit & Compliance: tutorials/04-audit-and-compliance.md
    - Agent Reliability: tutorials/05-agent-reliability.md
    - Execution Sandboxing: tutorials/06-execution-sandboxing.md
    - MCP Security Gateway: tutorials/07-mcp-security-gateway.md
    - Agent Control Specification: tutorials/55-agent-control-specification.md
    - OPA / Rego / Cedar Policies: tutorials/08-opa-rego-cedar-policies.md
    - Prompt Injection Detection: tutorials/09-prompt-injection-detection.md
    - Plugin Marketplace: tutorials/10-plugin-marketplace.md
    - Saga Orchestration: tutorials/11-saga-orchestration.md
    - Liability & Attribution: tutorials/12-liability-and-attribution.md
    - Observability & Tracing: tutorials/13-observability-and-tracing.md
    - Kill Switch & Rate Limiting: tutorials/14-kill-switch-and-rate-limiting.md
    - RL Training Governance: tutorials/15-rl-training-governance.md
    - Protocol Bridges: tutorials/16-protocol-bridges.md
    - Advanced Trust: tutorials/17-advanced-trust-and-behavior.md
    - Compliance Verification: tutorials/18-compliance-verification.md
    - .NET package: tutorials/19-dotnet-sdk.md
    - C# MCP extension: tutorials/42-csharp-mcp-extension.md
    - TypeScript package: tutorials/20-typescript-sdk.md
    - Rust crate: tutorials/21-rust-sdk.md
    - Go module: tutorials/22-go-sdk.md
    - Delegation Chains: tutorials/23-delegation-chains.md
    - Cost & Token Budgets: tutorials/24-cost-and-token-budgets.md
    - Security Hardening: tutorials/25-security-hardening.md
    - SBOM & Signing: tutorials/26-sbom-and-signing.md
    - MCP Scan CLI: tutorials/27-mcp-scan-cli.md
    - Build Custom Integration: tutorials/28-build-custom-integration.md
    - Agent Discovery: tutorials/29-agent-discovery.md
    - Agent Lifecycle: tutorials/30-agent-lifecycle.md
    - Entra Agent ID Bridge: tutorials/31-entra-agent-id-bridge.md
    - E2E Encrypted Messaging: tutorials/32-e2e-encrypted-messaging.md
    - Offline Verifiable Receipts: tutorials/33-offline-verifiable-receipts.md
    - MAF Integration: tutorials/34-maf-integration.md
    - Antigravity CLI Governance: tutorials/52-antigravity-cli-governance.md
    - OpenCode CLI Governance: tutorials/54-opencode-cli-governance.md
  - Deployment:
    - Overview: deployment/index.md
    - Azure Container Apps: deployment/azure-container-apps.md
    - Azure Foundry Agent Service: deployment/azure-foundry-agent-service.md
    - AWS ECS / Fargate: deployment/aws-ecs.md
    - Google Cloud GKE: deployment/gcp-gke.md
    - OpenClaw Sidecar: deployment/openclaw-sidecar.md
    - Private Endpoints: deployment/private-endpoints.md
  - Security:
    - Overview: security/index.md
    - Threat Model: security/threat-model.md
    - Security Scanning: security/scanning.md
    - Tenant Isolation: security/tenant-isolation.md
    - Trust Score Calibration: security/trust-score-calibration.md
    - Audits: security/audits/README.md
    - Reporting a Vulnerability: security/disclosure.md
  - Compliance:
    - Overview: compliance/index.md
    - OWASP ASI 2026 (Reference Architecture): compliance/owasp-agentic-top10-architecture.md
    - OWASP ASI Policy-Rule Mapping: compliance/owasp-asi-policy-mapping.md
    - OWASP LLM Top 10: compliance/owasp-llm-top10-mapping.md
    - OWASP MCP Top 10: compliance/mcp-owasp-top10-mapping.md
    - NSA MCP Alignment: compliance/nsa-mcp-alignment.md
    - NIST AI RMF Alignment: compliance/nist-ai-rmf-alignment.md
    - NIST RFI 2026-00206: compliance/nist-rfi-2026-00206.md
    - EU AI Act Checklist: compliance/eu-ai-act-checklist.md
    - SOC 2 Mapping: compliance/soc2-mapping.md
    - ISO/IEC 42001 Mapping: compliance/iso-42001-mapping.md
    - CIS Controls v8.1 Mapping: compliance/cis-controls-v81-mapping.md
    - CSA Agentic Trust Framework: compliance/atf-conformance-assessment.md
    - FRIA Template: compliance/fria-template.md
    - Impact Assessment Template: compliance/impact-assessment-template.md
    - Incident Response Workflow: compliance/incident-response-workflow.md
    - Post-Market Monitoring: compliance/post-market-monitoring.md
    - Record Retention Policy: compliance/record-retention-policy.md
    - Data Provenance Model: compliance/data-provenance-model.md
  - Specifications:
    - "Agent OS Policy Engine": specs/AGENT-OS-POLICY-ENGINE-1.0.md
    - "AgentMesh Identity & Trust": specs/AGENTMESH-IDENTITY-TRUST-1.0.md
    - "Agent Hypervisor Execution Control": specs/AGENT-HYPERVISOR-EXECUTION-CONTROL-1.0.md
    - "AgentMesh Trust & Coordination": specs/AGENTMESH-TRUST-COORDINATION-1.0.md
    - "AgentMesh Wire Protocol": specs/AGENTMESH-WIRE-1.0.md
    - "Agent SRE Governance": specs/AGENT-SRE-GOVERNANCE-1.0.md
    - "MCP Security Gateway": specs/MCP-SECURITY-GATEWAY-1.0.md
    - "Agent Lightning Fast-Path": specs/AGENT-LIGHTNING-FAST-PATH-1.0.md
    - "Framework Adapter Contract": specs/FRAMEWORK-ADAPTER-CONTRACT-1.0.md
    - "Audit & Compliance": specs/AUDIT-COMPLIANCE-1.0.md
  - Architecture Decisions:
    - Overview: adr/index.md
    - "ADR-0001: Ed25519 for Identity": adr/0001-use-ed25519-for-agent-identity.md
    - "ADR-0002: Four Execution Rings": adr/0002-use-four-execution-rings-for-runtime-privilege.md
    - "ADR-0003: IATP Handshake 200ms": adr/0003-keep-iatp-handshake-within-200ms.md
    - "ADR-0004: Deterministic Policy": adr/0004-keep-policy-evaluation-deterministic.md
    - "ADR-0005: Liveness Attestation": adr/0005-add-liveness-attestation-to-trust-handshake.md
    - "ADR-0006: Constitutional Constraints": adr/0006-constitutional-constraint-layer-as-community-extension.md
    - "ADR-0007: JWKS Federation": adr/0007-external-jwks-federation-for-cross-org-identity.md
    - "ADR-0008: Cross-Org Policy Federation": adr/0008-cross-org-policy-federation.md
    - "ADR-0009: RFC 9334 RATS Alignment": adr/0009-rfc-9334-rats-architecture-alignment.md
    - "ADR-0010: TEE Keystore SEV-SNP": adr/0010-tee-keystore-sevsnp-attestation.md
    - "ADR-0011: Additive Policy Contract": adr/0011-additive-policy-check-contract.md
    - "ADR-0012: Cost Governance": adr/0012-cost-governance-observability-policies.md
    - "ADR-0013: Fail Closed on Errors": adr/0013-fail-closed-on-policy-evaluation-errors.md
    - "ADR-0014: Parent Deny Immutable": adr/0014-parent-deny-rules-immutable-in-merge.md
    - "ADR-0015: Pluggable Policy Backends": adr/0015-pluggable-external-policy-backends.md
    - "ADR-0016: Trust Ceiling Propagation": adr/0016-trust-ceiling-propagation-for-delegation.md
    - "ADR-0017: Merkle Audit Chain": adr/0017-merkle-chain-for-audit-tamper-evidence.md
    - "ADR-0018: Reconstructible Decision BOM": adr/0018-reconstructible-decision-bom-over-prebuilt.md
    - "ADR-0019: OTel Event Sink Pattern": adr/0019-otel-batchspanprocessor-pattern-for-event-sink.md
    - "ADR-0020: Circuit Breaker for Sinks": adr/0020-circuit-breaker-for-event-sink-delivery.md
    - "ADR-0021: CloudEvents Envelope": adr/0021-cloudevents-envelope-for-mesh-audit.md
    - "ADR-0022: Compliance Auto-Mapping": adr/0022-compliance-framework-auto-mapping.md
    - "ADR-0023: Hypervisor Delta Engine": adr/0023-append-only-delta-engine-for-hypervisor-audit.md
    - "ADR-0024: RL Training Governance": adr/0024-rl-training-governance-with-violation-penalties.md
    - "ADR-0025: Structural Typing Protocols": adr/0025-structural-typing-for-sink-and-source-protocols.md
  - Reference:
    - Benchmarks: reference/benchmarks.md
    - Comparison: reference/comparison.md
    - NIST RFI Mapping: reference/nist-rfi-mapping.md
    - Changelog: reference/changelog.md
    - Contributing: reference/contributing.md