Agentic Covenants / Agentic Interventions Matrix

Supply chain at Client-side cutoffs

This layer is fast.

Remove suspect MCP server from allowlist, quarantine downloaded packages to restricted location, lock lockfile, pin runtime to last-known-good, kill agent.