MS Agent Governance Toolkit vs Google AX — two opposite layers of 2026 agent infrastructure

MS Agent Governance Toolkit vs Google AX — two opposite layers of 2026 agent infrastructure

Two of the largest agent infrastructure projects of 2026 dropped within weeks

of each other. They share the keyword "agent runtime" but sit on opposite

sides of the stack. Reading them as competitors misses the point — they're

the two halves of the same architecture.

TL;DR

• MS Agent Governance Toolkit (AGT) — a policy & security plane that decides what an agent is allowed to do.

• Google AX (Agent eXecutor) — a distributed execution plane that runs the agent and survives crashes.

• Not competitors. AGT explicitly ships a Google ADK integration; AX leaves governance out of scope. The intended deployment is AGT on top of AX, not one or the other.

1. Positioning

2. Microsoft Agent Governance Toolkit

Features

Tech stack — polyglot across 5 languages

Python package layout

• Agent OS — policy engine, capability model, MCP security gateway

• AgentMesh — zero-trust identity, trust scoring, mesh coordination

• Agent Runtime — privilege rings, saga orchestration, execution control

• Agent SRE — SLOs, error budgets, chaos, circuit breakers

• Agent Compliance — OWASP verification, policy linting, integrity checks

Framework integrations

• Microsoft Agent Framework, Semantic Kernel

• LangChain / LangGraph (callback handlers)

• CrewAI (task decorators)

• AutoGen, OpenAI Agents SDK

• Google ADK (plugin system), LlamaIndex, Haystack, Mastra, Dify

• Azure AI Foundry, AWS Bedrock

Strengths

• Full coverage of OWASP Agentic Top 10 → NIST AI RMF and EU AI Act compliance ready out-of-the-box

• 5 languages × almost every major agent framework — drops into existing code

• Sub-millisecond enforcement, Microsoft-signed builds, MIT

• Only option that ships governance plugins for Claude Code and Copilot CLI

Weaknesses

• Provides no execution plane — a separate runtime is still required

• Content safety / prompt injection is explicitly out of scope

• Still Public Preview at v3.7.0 — breaking changes possible before GA

• Maintaining 5 language implementations risks feature drift across them

3. Google AX (Agent eXecutor)

Features

• Distributed runtime — Controller, Skill, Tool, and Agent each run as independent processes

• Single-writer architecture — guarantees state consistency

• Event log on SQLite — durable record of every execution, enables automatic resume after interruption

• gRPC actor communication — uniform interface for local and remote agents (default localhost:8494)

• A2A protocol bridge — interoperates with any A2A-compliant external agent

• Native on GKE Agent Sandbox / Agent Substrate — 16× growth in 5 months of preview

Tech stack — Go-centric monolithic core

• Language: Go 84.8%, Python 12.6%

• Transport: gRPC (proto/ax.proto)

• Storage: SQLite (event log)

• AI: Gemini API (built-in planner)

• Deployment: Kubernetes / Agent Substrate on GKE (recommended)

• Install: go install github.com/google/ax/cmd/ax@latest

Components

• Controller — coordinates execution, manages state

• EventLog — SQLite-backed durable event store

• AgentService — gRPC interface for remote agents

• Planner — default Gemini-backed planning agent

Supported SDKs

Strengths

• Long-running execution and failure recovery as first-class citizens — event log handles automatic resume

• gRPC + Kubernetes-native — horizontal scale and multi-node distribution feel natural

• A2A bridge for cross-ecosystem interoperability

• Combined with GKE Agent Sandbox, sandboxing and scaling are delegated to the substrate

• Single Go core keeps operational surface simple

Weaknesses

• Pre-v1.0 with major breaking changes announced upfront

• Go toolchain and Kubernetes are effectively required (Substrate is the recommended path)

• Policy / governance / identity is limited to "wiring audit calls" — no real enforcement

• Optimized around Google ADK — integrations for other frameworks rely on the A2A bridge

• Documentation and examples are still sparse (early development)

4. Decision guide

5. Why this matters in 2026

• Two hyperscalers open-sourced opposite abstraction layers at almost the same moment. That's a signal that 2026 agent infrastructure is splitting cleanly into runtime (AX) and governance (AGT).

• AGT explicitly shipping a Google ADK integration is the strongest hint that the two were designed to compose, not compete.

• OWASP's December 2025 release of the Agentic Top 10 is becoming the de-facto standard — AGT is its first comprehensive implementation.

• AX's 16× growth on GKE Agent Sandbox confirms the trend of "agents as container workloads", which makes a Kubernetes-native execution plane the new baseline.

Sources

• https://opensource.microsoft.com/blog/2026/04/02/introducing-the-agent-governance-toolkit-open-source-runtime-security-for-ai-agents/

• https://github.com/microsoft/agent-governance-toolkit

• https://github.com/microsoft/agent-governance-toolkit/blob/main/docs/i18n/README.ko.md

• https://techcommunity.microsoft.com/blog/linuxandopensourceblog/agent-governance-toolkit-architecture-deep-dive-policy-engines-trust-and-sre-for/4510105

• https://www.infoworld.com/article/4155591/microsofts-new-agent-governance-toolkit-targets-top-owasp-risks-for-ai-agents.html

• https://github.com/google/ax

• https://cloud.google.com/blog/products/ai-machine-learning/agent-executor-googles-distributed-agent-runtime

• https://cloud.google.com/blog/products/containers-kubernetes/bringing-you-agent-sandbox-on-gke-and-agent-substrate

• https://www.infoq.com/news/2026/05/gke-agent-sandbox-hypercluster/

TECH LINKS

• 𝕏 @webnori

• 📘 Akka Labs (Facebook group)

• 📝 More writings — webnori wiki