Agentic Covenants / Agentic Interventions Matrix
Identity at Server-side cutoffs
This layer is authoritative.
Revoke OIDC token at IdP, disable ServiceAccount, rotate IAM keys, attach deny-all IAM policy, invalidate all active sessions.
Maps to
- NIST CSF 2.0
- RS.MI-01, RS.MI-02, PR.AA-01
- NIST AI RMF
- MANAGE 4.1
- OWASP Agentic
- ASI03, ASI10
- Other
- NIST SP 800-63B Rev. 4, NIST SP 800-207