Skip to content

Solutions Index

Live inventory reference for the companion FSI-AgentGov-Solutions repository.

Overview

This index tracks the 35 live solution implementations in the companion FSI-AgentGov-Solutions repository.

Companion solutions provide deployment documentation, governance scripts, KQL queries, and templates for manual Power Platform builds. They do not store exported Power Platform runtime artifacts in this catalog.

This file is intentionally folder-driven to reduce drift: live solution implementations are derived from top-level companion repository folders with root README.md files. Framework-native assets without matching solution folders remain documented in FSI-AgentGov and are not counted as companion solutions here.

Control coverage listed below reflects the primary controls published with each live solution.

Coverage scope

Not all 78 controls have a companion solution in FSI-AgentGov-Solutions. Solution mapping is selective by design.

Companion solutions are published when dedicated automation adds value beyond what Microsoft's native admin surfaces already provide. Many controls are operated entirely via native admin surfaces — Microsoft Purview, Entra ID, and the Power Platform Admin Center — and verified by the framework's own assessment-engine collectors rather than by a standalone solution.

Each control's automation field in assessment/manifest/controls.json (full, partial, or manual) describes verification feasibility independent of whether a companion solution exists. A control can be fully automated through collectors without needing a dedicated solution folder.

Absence of a control from this catalog is not a coverage gap — it reflects the framework's selective-mapping principle, which helps keep the companion repository focused on automation that supports outcomes the native surfaces do not deliver on their own.

Live Inventory (35 Solutions)

Solution Repository folder Version Primary controls Summary
Action Confirmation Auditor action-confirmation-auditor v1.0.0 1.23 Step-up confirmation validation for agent actions.
Agent 365 Lifecycle Governance agent-365-lifecycle-governance v1.1.0 2.3, 1.2, 1.11, 2.1, 2.8, 2.12, 3.1 Automated lifecycle governance for AI agents using Agent 365 and Entra ID Governance.
Agent Access Monitor agent-access-monitor v1.0.0 3.8 Automated detection of overly permissive agent access configurations.
Agent Communication Restriction Detector agent-communication-restriction-detector v1.0.0 2.17 Inter-agent communication restriction validation.
Agent Knowledge Source Scanner agent-knowledge-source-scanner v1.0.0 4.3, 1.4, 1.5 Item-level permission scanning for agent knowledge source SharePoint libraries.
Agent Observability Foundation agent-observability-foundation v1.1.0 — Foundational observability infrastructure for agent monitoring.
Agent Registry Automation agent-registry-automation v1.0.0 1.2, 1.7, 2.1, 2.13 Automated discovery, registration, approval, and lifecycle governance of AI agents.
Agent Sharing Access Restriction Detector agent-sharing-access-restriction-detector v1.0.1 1.18, 2.8 Zone-based agent sharing policy enforcement with approval workflows.
Audit Compliance Manager audit-compliance-manager v1.0.0 1.7 Audit configuration validation, gap detection, and remediation workflows.
COI Testing coi-testing v1.0.0 2.18, 2.11, 2.5 Conflict of interest testing for agent recommendations.
Compliance Dashboard compliance-dashboard v1.0.0 3.3, 3.1, 3.2 Aggregated compliance reporting across the framework control catalog with Exchange coverage.
Conditional Access Automation conditional-access-automation v1.1.1 1.11, 1.23, 1.18 CA policy deployment, compliance monitoring, and drift detection.
Content Moderation Monitor content-moderation-monitor v1.0.1 1.8, 1.14 Per-agent content moderation validation against zone requirements.
Copilot Studio Analytics copilot-studio-analytics v1.0.0 3.2 Business impact analytics for Copilot Studio agents.
Credential Oversharing Detector credential-oversharing-detector v2.0.0 1.14, 1.4, 1.18 Scans Copilot Studio agent credentials against zone policy to detect overprivileged connectors, excessive OAuth scopes, unauthorized service accounts, cross-environment sharing, and stale credentials.
Cross-Solution Integration cross-solution-integration v1.0.0 1.7, 1.23, 1.11, 3.8, 1.8, 1.14 Wires Tier 2 companion solutions into Compliance Dashboard.
Cross-Tenant External Sharing Governance cross-tenant-external-sharing-governance v1.0.0 1.1, 1.18, 2.1, 2.8, 3.1, 1.11 Three-layer cross-tenant access governance covering tenant isolation, Entra cross-tenant access, and agent sharing.
Deny Event Correlation Report deny-event-correlation-report v2.0.0 1.5, 1.7, 1.8, 3.4 Daily deny event correlation across Purview, DLP, and Application Insights.
DR Testing Framework dr-testing-framework v1.0.0 2.4, 2.1, 1.9 Automated disaster recovery testing for AI agents.
Environment Lifecycle Management environment-lifecycle-management v1.1.2 2.1, 2.2, 2.3, 2.8, 1.7 Automated environment provisioning with zone-based governance.
File Upload Security file-upload-security v1.0.0 1.14, 1.8, 1.4 Per-agent file upload validation against zone governance policies.
FINRA Supervision Workflow finra-supervision-workflow v1.0.0 2.12, 1.10, 1.7 Automated supervision queue for AI agent outputs.
Generative AI Config Auditor generative-ai-config-auditor v1.0.0 2.24 GenAI feature enablement governance by governance zone.
Hallucination Tracker hallucination-tracker v1.0.0 3.10, 2.9, 2.12 Feedback aggregation for hallucination pattern analysis.
HITL Workflow Governance hitl-workflow-governance v1.1.0 2.12, 2.17, 1.10 Validates that Copilot Studio agent flows include required human-in-the-loop checkpoints per zone governance policy using the Request for Information and Run a Multistage Approval actions from the advancedapprovals connector.
Inactivity Timeout Enforcement inactivity-timeout-enforcement v1.0.2 2.22, 1.23, 3.7, 3.8 Policy-driven inactivity timeout validation with zone-based durations.
Message Center Monitor message-center-monitor v2.1.1 2.3, 2.10 M365 Message Center monitoring for platform changes.
MIME Type Restrictions mime-type-restrictions v1.0.1 1.5, 1.10, 1.11, 1.13, 1.14, 1.25, 3.3, 3.7, 4.3 Zone-based MIME type configuration with server-side validation.
Model Risk Management Automation model-risk-management-automation v1.0.0 2.6, 2.5, 2.9, 2.11, 2.13, 3.1, 1.2 OCC 2011-12 / SR 11-7 model risk management with inventory, risk scoring, validation workflows, and Agent Card generation.
Pipeline Governance Cleanup pipeline-governance-cleanup v1.0.8 2.3, 2.1 Personal pipeline discovery and ALM governance enforcement.
RAG Source Validator rag-source-validator v1.0.0 2.16, 1.7, 2.13 Integrity validation for RAG knowledge sources.
Scope Drift Monitor scope-drift-monitor v1.1.0 1.14, 1.4, 1.5 Detect agent data access beyond declared scope.
Segregation Detector segregation-detector v1.0.0 2.8, 2.1, 2.3 Role conflict detection for Maker/Checker enforcement.
Session Security Configurator session-security-configurator v1.0.0 1.23, 1.11 Session security validation per governance zone with drift detection.
Unrestricted Agent Sharing Detector unrestricted-agent-sharing-detector v1.0.2 1.1, 3.8 Continuous detection of overly permissive agent sharing.

Solution Details

Action Confirmation Auditor

  • Repository folder: action-confirmation-auditor
  • Version: v1.0.0
  • Primary controls: 1.23
  • Summary: Step-up confirmation validation for agent actions.

Agent 365 Lifecycle Governance

  • Repository folder: agent-365-lifecycle-governance
  • Version: v1.1.0
  • Primary controls: 2.3, 1.2, 1.11, 2.1, 2.8, 2.12, 3.1
  • Summary: Automated lifecycle governance for AI agents using Agent 365 and Entra ID Governance.

Agent Access Monitor

  • Repository folder: agent-access-monitor
  • Version: v1.0.0
  • Primary controls: 3.8
  • Summary: Automated detection of overly permissive agent access configurations.

Agent Communication Restriction Detector

Agent Knowledge Source Scanner

  • Repository folder: agent-knowledge-source-scanner
  • Version: v1.0.0
  • Primary controls: 4.3, 1.4, 1.5
  • Summary: Item-level permission scanning for agent knowledge source SharePoint libraries.

Agent Observability Foundation

  • Repository folder: agent-observability-foundation
  • Version: v1.1.0
  • Primary controls: —
  • Summary: Foundational observability infrastructure for agent monitoring.

Agent Registry Automation

  • Repository folder: agent-registry-automation
  • Version: v1.0.0
  • Primary controls: 1.2, 1.7, 2.1, 2.13
  • Summary: Automated discovery, registration, approval, and lifecycle governance of AI agents.

Agent Sharing Access Restriction Detector

Audit Compliance Manager

  • Repository folder: audit-compliance-manager
  • Version: v1.0.0
  • Primary controls: 1.7
  • Summary: Audit configuration validation, gap detection, and remediation workflows.

COI Testing

  • Repository folder: coi-testing
  • Version: v1.0.0
  • Primary controls: 2.18, 2.11, 2.5
  • Summary: Conflict of interest testing for agent recommendations.

Compliance Dashboard

  • Repository folder: compliance-dashboard
  • Version: v1.0.0
  • Primary controls: 3.3, 3.1, 3.2
  • Summary: Aggregated compliance reporting across the framework control catalog with Exchange coverage.

Conditional Access Automation

  • Repository folder: conditional-access-automation
  • Version: v1.1.1
  • Primary controls: 1.11, 1.23, 1.18
  • Summary: CA policy deployment, compliance monitoring, and drift detection.

Content Moderation Monitor

  • Repository folder: content-moderation-monitor
  • Version: v1.0.1
  • Primary controls: 1.8, 1.14
  • Summary: Per-agent content moderation validation against zone requirements.

Copilot Studio Analytics

  • Repository folder: copilot-studio-analytics
  • Version: v1.0.0
  • Primary controls: 3.2
  • Summary: Business impact analytics for Copilot Studio agents.

Credential Oversharing Detector

  • Repository folder: credential-oversharing-detector
  • Version: v2.0.0
  • Primary controls: 1.14, 1.4, 1.18
  • Summary: Scans Copilot Studio agent credentials against zone policy to detect overprivileged connectors, excessive OAuth scopes, unauthorized service accounts, cross-environment sharing, and stale credentials.

Cross-Solution Integration

  • Repository folder: cross-solution-integration
  • Version: v1.0.0
  • Primary controls: 1.7, 1.23, 1.11, 3.8, 1.8, 1.14
  • Summary: Wires Tier 2 companion solutions into Compliance Dashboard.

Cross-Tenant External Sharing Governance

  • Repository folder: cross-tenant-external-sharing-governance
  • Version: v1.0.0
  • Primary controls: 1.1, 1.18, 2.1, 2.8, 3.1, 1.11
  • Summary: Three-layer cross-tenant access governance covering tenant isolation, Entra cross-tenant access, and agent sharing.

Deny Event Correlation Report

  • Repository folder: deny-event-correlation-report
  • Version: v2.0.0
  • Primary controls: 1.5, 1.7, 1.8, 3.4
  • Summary: Daily deny event correlation across Purview, DLP, and Application Insights.

DR Testing Framework

  • Repository folder: dr-testing-framework
  • Version: v1.0.0
  • Primary controls: 2.4, 2.1, 1.9
  • Summary: Automated disaster recovery testing for AI agents.

Environment Lifecycle Management

  • Repository folder: environment-lifecycle-management
  • Version: v1.1.2
  • Primary controls: 2.1, 2.2, 2.3, 2.8, 1.7
  • Summary: Automated environment provisioning with zone-based governance.

File Upload Security

  • Repository folder: file-upload-security
  • Version: v1.0.0
  • Primary controls: 1.14, 1.8, 1.4
  • Summary: Per-agent file upload validation against zone governance policies.

FINRA Supervision Workflow

  • Repository folder: finra-supervision-workflow
  • Version: v1.0.0
  • Primary controls: 2.12, 1.10, 1.7
  • Summary: Automated supervision queue for AI agent outputs.

Generative AI Config Auditor

  • Repository folder: generative-ai-config-auditor
  • Version: v1.0.0
  • Primary controls: 2.24
  • Summary: GenAI feature enablement governance by governance zone.

Hallucination Tracker

  • Repository folder: hallucination-tracker
  • Version: v1.0.0
  • Primary controls: 3.10, 2.9, 2.12
  • Summary: Feedback aggregation for hallucination pattern analysis.

HITL Workflow Governance

  • Repository folder: hitl-workflow-governance
  • Version: v1.1.0
  • Primary controls: 2.12, 2.17, 1.10
  • Summary: Validates that Copilot Studio agent flows include required human-in-the-loop checkpoints per zone governance policy using the Request for Information and Run a Multistage Approval actions from the advancedapprovals connector.

Inactivity Timeout Enforcement

  • Repository folder: inactivity-timeout-enforcement
  • Version: v1.0.2
  • Primary controls: 2.22, 1.23, 3.7, 3.8
  • Summary: Policy-driven inactivity timeout validation with zone-based durations.

Message Center Monitor

  • Repository folder: message-center-monitor
  • Version: v2.1.1
  • Primary controls: 2.3, 2.10
  • Summary: M365 Message Center monitoring for platform changes.

MIME Type Restrictions

  • Repository folder: mime-type-restrictions
  • Version: v1.0.1
  • Primary controls: 1.5, 1.10, 1.11, 1.13, 1.14, 1.25, 3.3, 3.7, 4.3
  • Summary: Zone-based MIME type configuration with server-side validation.

Model Risk Management Automation

  • Repository folder: model-risk-management-automation
  • Version: v1.0.0
  • Primary controls: 2.6, 2.5, 2.9, 2.11, 2.13, 3.1, 1.2
  • Summary: OCC 2011-12 / SR 11-7 model risk management with inventory, risk scoring, validation workflows, and Agent Card generation.

Pipeline Governance Cleanup

  • Repository folder: pipeline-governance-cleanup
  • Version: v1.0.8
  • Primary controls: 2.3, 2.1
  • Summary: Personal pipeline discovery and ALM governance enforcement.

RAG Source Validator

  • Repository folder: rag-source-validator
  • Version: v1.0.0
  • Primary controls: 2.16, 1.7, 2.13
  • Summary: Integrity validation for RAG knowledge sources.

Scope Drift Monitor

  • Repository folder: scope-drift-monitor
  • Version: v1.1.0
  • Primary controls: 1.14, 1.4, 1.5
  • Summary: Detect agent data access beyond declared scope.

Segregation Detector

  • Repository folder: segregation-detector
  • Version: v1.0.0
  • Primary controls: 2.8, 2.1, 2.3
  • Summary: Role conflict detection for Maker/Checker enforcement.

Session Security Configurator

  • Repository folder: session-security-configurator
  • Version: v1.0.0
  • Primary controls: 1.23, 1.11
  • Summary: Session security validation per governance zone with drift detection.

Unrestricted Agent Sharing Detector