Agentic Inventory Matrix
What agents exist, what they touch, what threats they face?
Filter
Layers, by what they can actually enforce
- Self-declared — advisory
The agent reports itself. It can be wrong, stale, or absent entirely.
- Operator-declared — deterministic-when-invoked
The operator registered it. Accurate only as far as the operator knows.
- Discovered — deterministic-and-external
Found independently by scanning the target. Trusts neither of the above.
Showing 3 of 15.
Blast radius at Self-declared
Agent reports declared risk tier, damage cap, forbidden operations from its charter. Reports current environment and data class access.
Blast radius at Operator-declared
Operator records blast-radius profile per agent. Worst-case impact statement (revenue, customer, compliance).
Blast radius at Discovered
Threat-modeling output (MAESTRO Layer 7, MITRE ATLAS, lateral-movement path analysis). Behavioral observation of what the agent has touched.