Semantic Kernel 1.76.0 is the kind of release that looks boring until you read it with the right threat model. Microsoft did not ship a new agent abstraction here. It shipped path validation, OpenAPI escaping, gRPC address allowlists, cloud-drive defaults, upload-directory controls, and dependency vulnerability updates. In other