MICROSOFT PUB_DATE: 2026.05.22

MICROSOFT OPEN-SOURCES RAMPART AND CLARITY TO PUT AGENT SAFETY INTO CI/CD

Microsoft open-sourced RAMPART and Clarity to move agent safety testing into your CI/CD pipeline. Microsoft open-sourced [Rampart](https://www.infoworld.com/ar...

Microsoft open-sourced RAMPART and Clarity to move agent safety testing into your CI/CD pipeline.

Microsoft open-sourced Rampart and Clarity to make AI agent safety continuous, not checkpoint-based. DevOps.com shows pytest-style scenarios, cross‑prompt injection coverage, and statistical trials you can run in CI.

This lines up with calls to rethink pipelines for agents The New Stack and to add AI-aware telemetry as OpenTelemetry moves into the AI era. AWS published a hands-on agent eval/observability workshop with Bedrock and OTEL traces repo, and Harbor shipped resource enforcement to keep agents in bounds v0.8.0.

[ WHY_IT_MATTERS ]
01.

Agent systems now execute actions; safety needs to run like tests, not audits.

02.

Baking safety into CI plus OTEL traces shortens incident response and reduces blast radius.

[ WHAT_TO_TEST ]
  • terminal

    Stand up RAMPART in CI with cross‑prompt injection and unsafe tool-use scenarios; require pass rates under statistical trials.

  • terminal

    Instrument agents with OpenTelemetry spans and compare traces before/after safety policies using the AWS workshop as a template.

[ BROWNFIELD_PERSPECTIVE ]

Legacy codebase integration strategies...

  • 01.

    Add a thin RAMPART adapter over your current agent entrypoints and gate merges on core safety scenarios.

  • 02.

    Plumb OTEL tracing through your existing collector; map agent steps, tool calls, and guardrail decisions to spans.

[ GREENFIELD_PERSPECTIVE ]

Fresh architecture paradigms...

  • 01.

    Design an evaluation-first agent stack: threat model → RAMPART tests → CI gates → OTEL dashboards.

  • 02.

    Define RBAC and resource limits up front; enforce with your orchestrator or frameworks that support quotas.

Enjoying_this_story?

Get daily MICROSOFT + SDLC updates.

  • Practical tactics you can ship tomorrow
  • Tooling, workflows, and architecture notes
  • One short email each weekday

FREE_FOREVER. TERMINATE_ANYTIME. View an example issue.

GET_DAILY_EMAIL
AI + SDLC // 5 MIN DAILY