The Kernel That Must Say No: how Semantic Kernel gates AI tool execution

Mahmoud_Zalt · x · 2026-09-10

AI solutions architect Mahmoud Zalt dissects Microsoft's Semantic Kernel Python kernel.py, arguing an AI orchestrator earns trust by making refusal explicit. The Kernel is not the model, plugins, embeddings or MCP server — it's the control desk in front of them: the single public interface resolving functions, selecting services, applying filters and recording outcomes. It decides which requests proceed, how failures become model feedback, and which mutable values enter ChatHistory — effectively a policy boundary. The article walks through the mixin structure (Filter/Function/Services/Reliability extensions, KernelFunction, embeddings, MCP connectors) and frames the core engineering question: where should software draw the line between proceeding and refusing?

Original post →

More from coding & agent

coding & agent channel →