Agentic Inventory Matrix

What agents exist, what they touch, what threats they face?

Filter

Self-declared — advisory
The agent reports itself. It can be wrong, stale, or absent entirely.
Operator-declared — deterministic-when-invoked
The operator registered it. Accurate only as far as the operator knows.
Discovered — deterministic-and-external
Found independently by scanning the target. Trusts neither of the above.

Showing 5 of 15.

Identity at Operator-declared
Operator-maintained registry; agents.yaml in GitOps; ServiceNow CMDB; internal AI inventory tool. Owner-confirmed. Updated on charter signature.
Authorization at Operator-declared
Operator records authorized scope in registry, linked to RBAC manifest paths and IAM policy ARNs.
Blast radius at Operator-declared
Operator records blast-radius profile per agent. Worst-case impact statement (revenue, customer, compliance).
Approval gating at Operator-declared
Operator-maintained review calendar. Quarterly attestation. Tracks pending and overdue reviews.
Supply chain at Operator-declared
Operator records authorized-dependency manifest from agent charter. Linked to Covenants L2-C5 and L3-C5 allowlists. Version-controlled audit trail.