Agent Governance Toolkit vs Senbonzakura

Agent Governance Toolkit and Senbonzakura are both large language models tracked by AIDiveForge. Below is a side-by-side comparison of pricing, capabilities, platforms, and ownership — sourced from each tool's live website and verified before publishing.

Agent Governance Toolkit

Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents.

Senbonzakura

The tool identifies the activation-space directions that carry refusal behaviour in open-weight transformer models and edits them out of the weight matrices in a single pass — no gradient descent, no retraining. It extends the Arditi et al. single-direction method by automating direction search (borrowed from Heretic) and then cutting several directions at once, which the author reports moved the needle in practice where single-direction edits did not. The procedure is a one-time weight edit: you run it, you get a modified model file. There is no API, no inference server, and no managed hosting — you run it locally against your own model weights.

Attribute	Agent Governance Toolkit	Senbonzakura
Pricing	Free	Free
Free trial	No	No
Open source	Yes	Yes
Has API	Yes	No
Self-hosted option	Yes	Yes
Platforms	Available in Python, TypeScript, Rust, Go, and .NET	Python
Languages	Python, TypeScript, Rust, Go, and .NET	—
Released	2026-04-02	—
Pros	First toolkit to address all 10 OWASP agentic AI risks with deterministic, sub-millisecond policy enforcement Framework-agnostic from day one, hooks into framework native extension points so adding governance does not require rewriting agent code Available across language ecosystems with TypeScript SDK through npm and .NET SDK through NuGet Structured as monorepo with independently installable packages allowing incremental adoption Ships with 9,500+ tests and includes SLSA-compatible provenance, OpenSSF Scorecard tracking, CodeQL scanning, and Dependabot dependency monitoring	Multi-direction ablation targets the distributed refusal subspace simultaneously, so prompt categories that survive single-direction edits are more likely to be handled after the procedure. One-time weight edit with no retraining loop required, which means researchers get a modified checkpoint without provisioning GPU-hours for fine-tuning. Fully local and self-hosted with no API dependency, so the modified weights and the prompts used to test them never leave your own infrastructure. AGPL-3.0 open-source license means the full procedure is auditable and forkable, which matters when a research paper needs to cite and reproduce the exact modification method. Builds on documented prior work (Arditi et al., Heretic) rather than a proprietary black box, so the theoretical basis for what the tool does can be independently evaluated.
Cons	Provides application-level governance, not OS kernel-level isolation; policy engine and agents run in same process, so production recommendation is to run each agent in separate container Toolkit is currently in public preview and may have breaking changes before GA Real-world production adoption evidence still limited (announced April 2026)	The orthogonalisation procedure edits weight matrices directly, and the project documentation does not describe a formal evaluation of which non-refusal capabilities degrade as a side effect — teams running benchmarks on edited models will need to run their own capability regression tests before drawing any conclusions about the edit's scope. The tool targets mid-sized open-weight models, and the repository contains no guidance or reported results for very large models; teams working at higher parameter counts will hit an undocumented wall and have no community baseline to compare against. With nine commits and a near-zero fork and star count at curation time, the project has no established community, no issue triage, and no maintained documentation beyond the README — teams that hit an edge case are debugging alone, and teams that need long-term maintenance assurance will move to a more established fork of the Arditi et al. tooling instead. There is no API surface and no programmatic hook into the editing pipeline, so any team that wants to integrate refusal ablation into a repeatable CI or model-release workflow has to wrap the tool themselves or abandon it for a library that exposes callable functions.

Bottom line

Only Agent Governance Toolkit exposes a public API. Choose based on which difference matters most for your workflow.

Frequently asked questions

What is the difference between Agent Governance Toolkit and Senbonzakura?

Agent Governance Toolkit is Free and open source, while Senbonzakura is Free and open source. Compare pricing, free trial, API, platforms, and pros/cons in the table above on AIDiveForge.

Is Agent Governance Toolkit better than Senbonzakura?

It depends on your workflow. Use the side-by-side attributes (pricing, open source, API, self-hosted, platforms) to decide. AIDiveForge does not rank a universal winner — we publish verified facts so you can choose.