[Feature] GovernancePlugin for Google ADK — policy enforcement and zero-trust identity

Summary

Proposing a GovernancePlugin (BasePlugin subclass) for Google ADK that enforces policy before tool execution, powered by the Agent Governance Toolkit (AGT) — v3.2.0 Public Preview, 9,500+ tests, 5 SDK languages.

Problem

ADK agents executing tools in production need enforceable governance — policy checks before tool calls, agent identity verification, and audit logging — without requiring developers to implement these controls from scratch.

Proposed Solution

A GovernancePlugin that hooks into ADK's plugin lifecycle:

Pre-tool policy enforcement — Evaluate YAML/OPA policies before any tool execution
Zero-trust agent identity — IATP-based identity verification for multi-agent ADK deployments
Audit trail — Automatic logging of all tool calls with policy evaluation context
Human-in-the-loop gates — Configurable approval workflows for sensitive tool operations

Example Usage

`python
from google.adk.agents import Agent
from agt.integrations.adk import GovernancePlugin

agent = Agent(
model="gemini-2.0-flash",
tools=[...],
plugins=[GovernancePlugin(policy="adk-policy.yaml")]
)
`

AGT already has an integration example for Google ADK in the repository.

References

AGT Repository

Would appreciate feedback on alignment with ADK's plugin architecture and lifecycle hooks.

@imran-siddique

@imran-siddique Thanks for the update. The request is currently being reviewed, and I will let you know if anything further is needed. Thank you for understanding.

@imran-siddique

Hi @imran-siddique , thanks for the proposal, I think it makes sense to have this plugin in our community repo https://github.com/google/adk-python-community.

@klateefa

Thanks @klateefa and @DeanChensj! Great to hear — we'll prepare a PR for google/adk-python-community with the GovernancePlugin.

Will follow the community repo's contribution guidelines and include:

\GovernancePlugin\ (BasePlugin subclass) — policy evaluation before tool execution
Zero-trust identity verification for agent-to-agent calls
Audit logging integration
Tests + README

We'll open the PR shortly. Thanks for the direction!

Update: Contributor Reputation Action now available

While building governance tooling for the Agent Governance Toolkit, we uncovered a pattern of coordinated inauthentic contributions targeting AI agent frameworks. Accounts use a credibility-laundering pipeline: getting small PRs merged in one repo, then citing those merges as credentials in spray issues across dozens of other repos.

We built and shipped open-source tooling to detect these patterns, now available as a reusable GitHub Action any repo can adopt:

# .github/workflows/contributor-check.yml
on:
  pull_request_target:
    types: [opened]
  issues:
    types: [opened]

jobs:
  check:
    runs-on: ubuntu-latest
    steps:
      - uses: microsoft/agent-governance-toolkit/.github/actions/contributor-check@main
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          target-repo: microsoft/agent-governance-toolkit

What it does:

Checks contributor account shape (age, repo count, follower ratio)
Detects credential-spray patterns (merged PRs cited across other repos)
Labels and comments on MEDIUM/HIGH risk contributions for maintainer review
Zero external dependencies (Python stdlib only)

The tools are MIT-licensed at microsoft/agent-governance-toolkit/scripts/ and shipped in AGT v3.3.0.

Sharing as a heads-up since AI agent repos are prime targets for this kind of campaign. Happy to help with integration if useful.

🚨 Automated Spam Detection Alert 🚨
@maintainers, a suspected spam comment was detected in this thread.

Reason:

@imran-siddique's last comment promotes a "Contributor Reputation Action" and related tooling from the Agent Governance Toolkit, which is a separate product/tool unrelated to the original issue's proposed GovernancePlugin for Google ADK.

Closing — the GovernancePlugin work has evolved and is now part of microsoft/agent-governance-toolkit. Happy to revisit if the ADK team has interest.

Navigation Menu

Repository navigation

[Feature] GovernancePlugin for Google ADK — policy enforcement and zero-trust identity #5418

Summary

Problem

Proposed Solution

Example Usage

References

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[Feature] GovernancePlugin for Google ADK — policy enforcement and zero-trust identity #5418

Description

Summary

Problem

Proposed Solution

Example Usage

References

Activity

klateefa commented on Apr 21, 2026

DeanChensj commented on Apr 21, 2026

imran-siddique commented on Apr 21, 2026

imran-siddique commented on Apr 27, 2026

adk-bot commented on Apr 27, 2026

imran-siddique commented on Jun 6, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions