Policy Enforcement and Tamper-Evident Audit Chains | ​Imran Siddique | MCP Release Party - Seattle

Session 3: Governed MCP: Policy Enforcement and Tamper-Evident Audit Chains ​MCP servers today have no built-in way to enforce policy or prove what happened after the fact. This session walks through cMCP, an open-source gateway that wraps any MCP server without requiring changes to it, enforcing Cedar policies before each tool call and chaining every call into a tamper-evident record. We'll cover how it works, see it running against a live server, and discuss where this fits into the broader MCP ecosystem as adoption grows. ​About Speaker: ​Imran Siddique is Chief Platform Officer at Opaque Systems and creator of the Agent Governance Toolkit, an open-source project (github.com/microsoft/agent-governance-toolkit) with ~5k GitHub stars positioned for the Agentic AI Foundation under the Linux Foundation. He founded agentrust-io (github.com/agentrust-io), an open standards initiative behind Agent Manifest and Confidential MCP. Imran spent 18 years across various parts of Microsoft Azure, most recently leading agentic AI architecture and engineering strategy on Azure Core Engineering. He's a published author who treats governance as an engineering discipline, not a checkbox. About the Event: This session was presented at the MCP Release Party hosted on July 28th at Microsoft Reactor in Seattle area. ​This event was hosted as a part of a series of MCP Release Parties taking place simultaneously in cities around the world.