foundry-agt

Enforce deterministic governance policies on Foundry hosted agent tool actions.

5|2|Updated Apr 28, 2026
One-click install
npx skills add https://github.com/aiappsgbb/awesome-gbb --skill foundry-agt
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: foundry-agt
Source: https://github.com/aiappsgbb/awesome-gbb/tree/main/skills/foundry-agt
Command: npx skills add https://github.com/aiappsgbb/awesome-gbb --skill foundry-agt

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill prevents Foundry hosted agents from performing unsafe or noncompliant actions by enforcing deterministic, pre-execution policy checks outside the LLM.

Core Features & Use Cases

  • Policy Engine for Tool/Action Control: Load YAML policies and evaluate them before tool execution to allow or deny actions.
  • Capability Allow/Deny Guardrails: Constrain which tools can be called, with explicit denied capabilities for destructive operations.
  • Tamper-evident Audit Trail: Produce hash-chained audit records and support CloudEvents export for compliance workflows.
  • Starter Governance Policies: Includes ready-to-use default, HITL gate, and PII-deny policy files for common Foundry governance scenarios.

Quick Start

Use the foundry-agt references and policies by wiring the build_governed_agent factory into your Foundry hosted-agent module and loading the references/policies directory for deterministic allow/deny enforcement.

Frequently Asked Questions about foundry-agt

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce deterministic policy checks on Foundry agent tool actions?

To enforce deterministic policy checks on Foundry agent tool actions, you can wrap Microsoft Agent Governance Toolkit middleware around agent-framework agents using pre-loaded YAML rules for allow or deny evaluations before execution.

What is the best way to prevent hosted agents from executing unsafe or destructive operations?

Preventing unsafe or destructive operations requires applying capability guardrails that explicitly deny specific capabilities, ensuring the agent cannot call destructive tools outside of pre-execution policy evaluations.

How do I generate tamper-evident audit logs for MCP-triggered tool usage?

Generating tamper-evident audit logs for MCP-triggered tool usage involves producing hash-chained audit records during execution, which can then be exported using CloudEvents format for compliance workflows.

Can I apply human-in-the-loop gating and PII guardrails to Foundry agents?

Yes, you can apply human-in-the-loop gating and PII guardrails to Foundry agents by loading starter governance policy files that explicitly define HITL gates and deny rules for sensitive data processing.

Does this governance approach evaluate policy rules outside the LLM?

Yes, this governance approach evaluates policy rules entirely outside the LLM by utilizing deterministic middleware to intercept and validate tool actions before they are executed, ensuring noncompliant actions are blocked.