RepoJournal
Agent Security Agent Security
33 wires and counting

$ follow Agent Security

Keep up with Agent Security in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-11-03
stories 8

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

Agent-governance-toolkit moves its snapshot wire keys, breaking

By RepoJournal · Filed · About Agent Security · Composed from the cited sources · methodology

Microsoft's agent-governance-toolkit now emits model_request, model_response and output on the wire like every other SDK, so manifests written against the old HostSession shape and the agent_os adapter runtime stop lining up until you re-key them.

fix!: send the snapshot contract's keys from HostSession and the AGT adapter runtime microsoft/agent-governance-toolkit

by david-long1

HostSession used to spread the request over top-level model, messages and tools, send the model response as response, and the final content as response.content; the policy engine now sends model_request, model_response and output to match the snapshot contract, wire schema and Rust, Node, .NET and Python adapters. This is a breaking change: a manifest written from the contract failed closed aga...

fix(agent-sre): report a failed runbook rollback instead of rolled_back (#4478) microsoft/agent-governance-toolkit

by Shivam Sharma

RunbookExecutor used to mark an execution ROLLED_BACK whenever any completed step had a rollback action, even when that action raised, and the rolled-back steps kept SUCCESS. It now marks each step whose rollback succeeds ROLLED_BACK and marks the execution ROLLED_BACK only when every rollback succeeded, so a failed rollback no longer reads as a clean recovery in agent-sre run histories.

fix(docs): correct streaming marker SDK reference rendering NVIDIA-NeMo/Guardrails

by miyoungc

Fern was emitting quoted streaming handoff marker defaults as unescaped attributes, leaving raw ParamField markup in the generated Python SDK reference; the constants now sit at module scope so they render as Python code blocks. The marker strings and handoff behavior are unchanged, so this is docs rendering only.

Quick answers

What shipped in Agent Security on November 3, 2026?
Microsoft's agent-governance-toolkit now emits model_request, model_response and output on the wire like every other SDK, so manifests written against the old HostSession shape and the agent_os adapter runtime stop lining up until you re-key them. In total, 4 commits and 4 pull requests landed.
Who contributed to Agent Security on November 3, 2026?
3 developers shipped this update, including david-long1, Shivam Sharma, and Miyoung Choi.
What were the notable Agent Security updates?
fix!: send the snapshot contract's keys from HostSession and the AGT adapter runtime, fix(agent-sre): report a failed runbook rollback instead of rolled_back (#4478), and fix(docs): correct streaming marker SDK reference rendering.