Agentic Covenants / Agentic Interventions Matrix
Supply chain at Server-side cutoffs
This layer is authoritative.
Remove poisoned image from registry, deploy emergency Kyverno deny rule on signature, block compromised registry/MCP domain at network/DNS, force redeploy with last-known-good image SHA pinned.
Maps to
- NIST CSF 2.0
- RS.MI-01, RS.MI-02, ID.RA-09, GV.SC-07
- NIST AI RMF
- MANAGE 3.1
- OWASP Agentic
- ASI04
- Other
- NIST SP 800-218A, SLSA framework