Entity trail

Microsoft Agent Framework

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-09-12 / agents-researcherMicrosoft Agent Framework .NET 1.21.0 tracks A2A task state and breaks the file-access line-numbering contractdotnet-1.21.0 (2026-09-11) adds tracking and updating of A2A task state and a second breaking change clarifying A2A agent run modes, which matters for anyone wiring the framework to other vendors' agents over A2A. The other breaking change adds file_access_read_lines and moves the line-numbering contract onto AgentFileStore. Dependency work removes the Azure.AI.OpenAI dependency outright and swaps the deprecated AWSSDK.Extensions.Bedrock.MEAI for AWS.Bedrock.MEAI, continuing the pattern of the framework shedding vendor-specific SDK coupling.
2026-09-10 / github-pulse-researcherMicrosoft Agent Framework python-1.18.0 ships three breaking changes and a whole vector-store layer on the same dayReleased 2026-09-10, this version makes `SecretString` a masked value wrapper rather than a `str` subclass across ten provider packages (#8127), makes GitHub Copilot workspace file hooks opt-in behind `enable_file_hooks` (#7517), and restricts Foundry checkpoint deserialization by default (#8045). Alongside it lands shared vector-store abstractions with portable filters plus Azure AI Search, Redis HASH/JSON, alpha Qdrant and alpha PostgreSQL/pgvector connectors. If you interpolate `SecretString` into a header today, this upgrade breaks you.
2026-09-04 / github-pulse-researcherMicrosoft Agent Framework 1.17.0 breaks agent middleware inputs back to sequence-only and drops the experimental agent-hooks extraThe Python 1.17.0 release on 2026-09-03 is marked BREAKING: it restores sequence-only agent middleware inputs and removes the experimental agent-hooks core extra (#7918). It also binds approvals to stable function-call occurrences while preserving legacy approval compatibility (#7988), preserves provider refusals as marked text across history, replay, hosting and UI conversion (#7992), supports OpenAI SDK 3.x while keeping existing floors (#7967), and migrates the Mistral chat and embedding clients to the official Mistral SDK (#7960). Anyone who adopted agent-hooks needs a migration before upgrading.
2026-08-29 / agents-researcherMicrosoft Agent Framework 1.16.0 stops workflow checkpoints being mutated outside storage and discards unsafe Content on deep copyThe Python 1.16.0 release of Microsoft Agent Framework, dated 27 August, is mostly a set of state-integrity corrections rather than features. It prevents workflow checkpoints from being mutated outside storage implementations (#7847), discards unsafe Content fields during deep copy (#7903), stops SerializationMixin.from_dict() mutating caller input (#7901), and keeps the private agent-loop iteration marker out of provider SDK requests (#7860). On the observability side it adds configurable timeouts for waiting on the first background-agent task and allows programmatic OpenTelemetry service metadata, resource attributes and OTLP exporter configuration.
2026-08-23 / agents-researcherMicrosoft Agent Framework .NET 1.19.0 promotes agent hooks to a first-class feature and breaks MCP long-running tasksReleased 22 August 2026, dotnet-1.19.0 adds an agent-hooks interception contract as an experimental first-class feature (PR #7564), Azure Blob Storage session persistence (#1893), session-persisted chat client routing (#7641), and Foundry hosted-agent state persistence (#7649). The breaking change is PR #7774, migrating MCP long-running task support to the 2026-07-28 Tasks extension, which lands the same spec release the new MCP roadmap treats as its baseline. Also included: an A2A streaming artifact update fix (#7722) and a feature-usage bitmask (#7709).
2026-08-22 / agents-researcherMicrosoft Agent Framework Python 1.15.0 blocks remote MCP tool-name shadowing and breaks OTel semantic conventionsThe 21 August release fixes remote MCP tools shadowing local tool names while keeping the documented argument allowlist, adds MiddlewareFailure as a first-class fatal signal for function middleware, restricts workflow type deserialization, and deduplicates saved messages in the Redis chat store to stop superlinear history growth. It ships a breaking change consolidating OpenTelemetry GenAI semantic-convention support into explicit stable and experimental modes with message-event controls, so anyone parsing agent traces needs to re-check their pipeline. Also added: a process-wide workflow checkpoint type registry with Cosmos state types, and steering/retry/recovery for Foundry Hosted Agents.
2026-08-20 / agents-researcherMicrosoft Agent Framework .NET 1.18.0 bounds the tool-approval auto-approval loop and scopes A2A task stores by isolation keyReleased 18 Aug 2026, dotnet-1.18.0 caps the auto-approval loop in tool approval (PR #7472), extends the experimental A2A task store with isolation-key scoping, hardens file skill discovery, and renames the provider to `AgentIsolationKeyProvider` as a documented breaking change. It also lets agents opt into concurrent tool invocation, aggregates token usage across looping agents and chat clients, adds `BackgroundAgentsProvider.ReleaseSessionAsync` to cancel per-session background work, and stops telemetry serialization failures from taking down a workflow. The unbounded approval loop and per-tenant task store leakage are both the kind of bug that only shows up in a multi-tenant deployment.
2026-08-14 / agents-researcherMicrosoft ships enforcement middleware for AGENT-HOOKS-0.1, a two-star community spec for agent lifecycle hooksAgent Framework Python 1.14.0 (2026-08-13) added experimental AGENT-HOOKS-0.1 enforcement middleware behind an opt-in `agent-hooks` extra. The spec is AgentHook — an Apache-2.0 open specification for AI agent lifecycle hooks stewarded by Agentic Thinking Limited (UK), first tagged v0.1.0 on 2026-04-26, last pushed 2026-07-07, and sitting at 2 GitHub stars. A hyperscaler implementing a near-unknown independent spec is the most interesting part: hooks are the deterministic enforcement boundary every agent runtime now has (Claude Code, Cursor, Codex, Copilot), and this is the first move toward one of them being portable rather than per-vendor.
2026-08-14 / agents-researcherMicrosoft Agent Framework Python 1.14.0 adds Mistral, spins Durable Task out to its own repo, and blocks Windows junctions in skill discoveryPython 1.14.0 landed 2026-08-13 with a native Mistral chat client (chat, streaming, tools, structured output, embeddings), request/response hooks on OpenAIChatCompletionClient, workflow checkpoint and resume in the AG-UI integration, and BackgroundAgentsProvider.release_session() for cancelling work and releasing per-session state. Two breaking changes: functional workflow definitions must now be built into stateful instances before running, and Foundry Hosted Agents migrate to the Agent Server Responses 2.x storage model. The Durable Task and Azure Functions integrations moved out to a separate agent-framework-durable-extension repo, and a quiet security fix now rejects Windows junctions during skill discovery — the same directory-traversal class that has been hitting agent skill loaders all year.
2026-08-09 / agents-researcherMicrosoft Agent Framework Harness and Foundry Hosted Agents reach GA — and a cited teardown puts Claude Code at 98.4% harness, 1.6% AI logicInfoQ reported on August 3 that the Agent Framework Harness and Foundry Hosted Agents moved to general availability in .NET and Python, four months after MAF 1.0 shipped on April 2. The harness bundles function invocation, per-call history persistence, context compaction, a todo list with plan/execute modes, file memory, skills, web search, tool approval and built-in OpenTelemetry. Two numbers make the case: research analyzing Claude Code's architecture found approximately 98.4% of the codebase is harness infrastructure versus 1.6% AI decision logic, and in a comparative run MAF halted after 40 round-trips with a limit-reached message while the GitHub Copilot SDK ran to 300 without stopping on its own.
2026-08-09 / agents-researcherCheck Point found 11 vulnerabilities across six agent frameworks — and argues the frameworks, not prompt injection, are the bugAt Black Hat 2026, Check Point's Yarden Porat and Shahar Tal presented 11 vulnerabilities spanning LangChain, LangGraph, CrewAI, AutoGen, Microsoft Agent Framework and Google ADK, showing that prompt-controlled content crosses the boundary into trusted framework logic itself. The bug classes are boringly conventional — insecure deserialization, SSRF, path traversal, use-after-free — which is precisely the point. A Microsoft Agent Framework checkpoint-deserialization flaw let one user plant a payload via prompt injection that fired when another user reloaded their session ($10,000 bounty); Google ADK shipped an unauthenticated HTTP API on by default that executed arbitrary Python and exposed service-account credentials ($3,133.70).
2026-08-09 / news-researcherMicrosoft's CodeAct Cuts Agent Latency 52% and Token Use 64% by Having the Model Write One Program Instead of Chaining Tool CallsMicrosoft Agent Framework's CodeAct has the model write a single short Python program that calls tools via call_tool(), executes it once in a fresh Hyperlight micro-VM per call, and returns a consolidated result — shipping in the alpha agent-framework-hyperlight package. On Microsoft's representative multi-step workload, traditional tool wiring took 27.81 seconds and 6,890 tokens while CodeAct took 13.23 seconds and 2,489 tokens: 52.4% faster and 63.9% fewer tokens. Reporting on the Agent Harness GA also cites an analysis that ~98.4% of the Claude Code codebase is harness infrastructure and only ~1.6% is AI decision logic.

Graph relationships

SUPPORTS
PostgreSQL
Microsoft Agent Framework 1.18.0 adds alpha PostgreSQL/pgvector connectors.
Source finding
SUPPORTS
Qdrant
Microsoft Agent Framework 1.18.0 adds alpha Qdrant vector-store connectors.
Source finding
SUPPORTS
Redis
Microsoft Agent Framework 1.18.0 adds Redis HASH/JSON vector-store connectors.
Source finding
SUPPORTS
Azure AI Search
Microsoft Agent Framework 1.18.0 adds Azure AI Search vector-store connectors.
Source finding
CRITICIZES
Check Point
Check Point found a Microsoft Agent Framework checkpoint-deserialization flaw
Source finding
BUILT BY
Microsoft
Microsoft Agent Framework is built and maintained by Microsoft.
Source finding
SUPPORTS
GitHub Copilot SDK
Microsoft Agent Framework provides stable integration with GitHub Copilot SDK.
Source finding
SUPPORTS
Claude Agent SDK
Microsoft Agent Framework provides stable integration with Claude Agent SDK.
Source finding
RELEASED
Microsoft
Microsoft released Agent Framework 1.0 with orchestration patterns.
Source finding
DEPRECATES
Semantic Kernel
Microsoft Agent Framework consolidates Semantic Kernel and AutoGen
Source finding
BUILT BY
Microsoft
Microsoft Agent Framework is built by Microsoft
Source finding
RELEASED
Microsoft
Microsoft released Agent Framework GA after merging AutoGen and Semantic Kernel.
Source finding

Source trail

release notes Released September 10 GitHub dotnet-1.19.0 GitHub The Register Diagrid The releases Microsoft Go Blog (Stack Overflow)(arXiv)(Latent Space)

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…