[abisheakp197]

Closes #8896

Description

This PR introduces NTI (Neutral Trust Infrastructure) as an optional security wrapper for Microsoft Agent Framework.

This integration adds NTISecurityWrapper which uses the ube-foundation Python SDK to enforce:

• Post-Quantum Cryptographic (PQC) signatures (Dilithium5/Kyber1024)
• Zero-Trust capability bounds (via TrustEngine.evaluate)
• BFT multi-agent consensus boundaries
• Immutable Merkle-chained audit logging

Installation

pip install ube-foundation

[abisheakp197]

@microsoft-github-policy-service

[Copilot]

Copilot review overview

🟡 Changes recommended

The documented import path is unusable, inbound messages are not authenticated, and the security-critical behavior lacks tests.

Review effort: Balanced
Findings: 2 · 6

Open (8)

• Fix security module and nti_security import collision · New
• Verify incoming sender identity and signature · New
• Add required Microsoft copyright notice · New
• Mark new security class as experimental · New
• Add constructor return type annotation · New
• Add method return type annotation · New
• Add tests for security authorization and imports · New
• Parameterize public message dictionary type · New

What changed in this PR

Adds an optional NTI-based security wrapper intended to provide post-quantum agent authorization.

Changes:

• Generates PQC keys and grants agent capabilities.
• Signs and evaluates message authorization requests through TrustEngine.

File	Description
python/​packages/​core/​agent_framework/​security/​nti_security.py	Introduces NTISecurityWrapper.

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

[abisheakp197]

@microsoft-github-policy-service agree

[github-code-quality]

Code Coverage Overview

Languages: C#

C# / code-coverage/dotnet

The overall line coverage in commit 2f5713f in the main branch is 85%. Line coverage data for the main branch is not yet available.

Show a line coverage summary of the most covered files.

File	main	main 2f5713f	+/-
/home/runner/wo...valConverter.cs	—	100%	—
/home/runner/wo...entsProvider.cs	—	99%	—
/home/runner/wo...egatingAgent.cs	—	99%	—
/home/runner/wo...nticAnalyzer.cs	—	94%	—
/home/runner/wo...putConverter.cs	—	90%	—
/home/runner/wo...kflowBuilder.cs	—	90%	—
/home/runner/wo...SkillsSource.cs	—	89%	—
/home/runner/wo...onExtensions.cs	—	81%	—
/home/runner/wo...CopilotAgent.cs	—	76%	—
/home/runner/wo...ctionVisitor.cs	—	75%	—

[Eduard van Valkenburg (eavanvalkenburg)]

see my comment on the issue, closing.