Microsoft Agent Governance Toolkit controls agent actions
… The toolkit turns policies into application controls. A developer can define that an agent may read data but may not drop tables, send external email without approval, or run shell commands outside a sandbox. The …