Microsoft Agent Framework .NET 1.18.0 bounds the tool-approval auto-approval loop and scopes A2A task stores by isolation key

GitHub (microsoft/agent-framework)·medium signalXBlueskyLinkedInCopy link

Released 18 Aug 2026, dotnet-1.18.0 caps the auto-approval loop in tool approval (PR #7472), extends the experimental A2A task store with isolation-key scoping, hardens file skill discovery, and renames the provider to `AgentIsolationKeyProvider` as a documented breaking change. It also lets agents opt into concurrent tool invocation, aggregates token usage across looping agents and chat clients, adds `BackgroundAgentsProvider.ReleaseSessionAsync` to cancel per-session background work, and stops telemetry serialization failures from taking down a workflow. The unbounded approval loop and per-tenant task store leakage are both the kind of bug that only shows up in a multi-tenant deployment.