Writing agent behavior requirements in plain English is easy. Enforcing them at scale is not. A policy document that says "the agent must not reveal PII" has zero enforcement weight unless it becomes a test that actually runs. That is exactly the problem Microsoft's ASSERT framework addresses — and it was released as open source at Build 2026 with...