Microsoft Introduces Portable Policy Files for Defining and Enforcing AI Agent Behavior

Microsoft has introduced a specification allowing developer, compliance, and security teams to define behavioral constraints for AI agents in portable policy files. The files can be shared and applied across agent frameworks, giving security teams a structured way to audit and enforce what agents are and are not permitted to do — without modifying underlying model code. The approach directly addresses enterprise concerns about high-autonomy agents acting outside their intended scope. Details on tooling integration and enforcement mechanisms were shared at Build 2026.