Microsoft gives it away free. Here is what you still build and run.
The Agent Governance Toolkit is an open-source, public-preview toolkit that you wire into your own agents, so state, policy lifecycle, and operations are yours to build and run. Swiftward is the finished on-prem product.
What the toolkit is
A free, MIT-licensed set of framework adapters and SDKs with runtime enforcement.
What Swiftward does differently
- Swiftward is a single binary plus Postgres, with the console, the gateways and the audit trail already in place.
- The toolkit's kernel is stateless by design, so you bring and run your own state store (Redis, Kafka, and the like) for counters, rate limits, and trust scores. Swiftward ships that state in Postgres, ACID, and an event processed twice changes it only once.
- Versioned policy-as-code is the part we add: immutable versions, rollback by naming the previous version, shadow mode and backtesting against real traffic, and the record of a past decision on the exact version that was live.
- Human review here survives a restart: the case waits, and the decision on it re-enters the same audited pipeline as a recorded event.
How far it reaches
The toolkit governs the agents your own teams write. Swiftward sits in the path of the call, so one policy also covers an agent you bought inside a product whose code you cannot read, and a payment or a claim decided by ordinary application code with no agent in it at all. See the capability comparison.