Microsoft Agent Framework Python 1.9.0 is the kind of release the agent ecosystem needs more of: fewer “look, it can call tools” demos, more policy wired into the place where tools are actually called. The headline is governance. MCP sampling is denied by default unless an approval callback