Microsoft is giving away for free what every wannabe compliance tool provider right now is pitching as a platform.

Seven packages. MIT license. Runtime policy enforcement. OWASP evidence collection. EU AI Act compliance mapping. Framework-agnostic.

The same feature list that costs you a monthly subscription, a sales call and an overpriced SLA - open-sourced on April 2.

The one thing they have in common: neither has solved the upstream problem yet.

If you cannot bound the behavioral space - and the math says you cannot - then continuous monitoring is watching infinity with a dashboard.

The tooling is not the bottleneck. The architecture is.