Agentic Covenants / Agentic Charter Matrix
Supply chain at Organizational charter
This layer is deterministic-and-external.
Org-wide allowlist of approved foundation models. Org-wide policy on MCP server approval, third-party dependency approval, vendor risk assessment integrated with procurement.
Maps to
- NIST CSF 2.0
- GV.SC-01, GV.SC-02, GV.SC-03, GV.SC-04, GV.SC-05, GV.SC-06, GV.SC-07, GV.SC-08, GV.SC-09, GV.SC-10, ID.RA-09
- NIST AI RMF
- GOVERN 6.1, GOVERN 6.2, MAP 4.1
- iso_iec_42001
- §A.10
- eu_ai_act
- Art. 25
- Other
- NIST SP 800-161 Rev. 1, NIST SP 800-218A