Agentic Inventory Matrix
What agents exist, what they touch, what threats they face?
Filter
Layers, by what they can actually enforce
- Self-declared: advisory
The agent reports itself. It can be wrong, stale, or absent entirely.
- Operator-declared: deterministic-when-invoked
The operator registered it. Accurate only as far as the operator knows.
- Discovered: deterministic-and-external
Found independently by scanning the target. Trusts neither of the above.
Showing 5 of 15.
Identity at Operator-declared
Operator-maintained registry; agents.yaml in GitOps; ServiceNow CMDB; internal AI inventory tool. Owner-confirmed. Updated on charter signature.
Authorization at Operator-declared
Operator records authorized scope in registry, linked to RBAC manifest paths and IAM policy ARNs.
Blast radius at Operator-declared
Operator records blast-radius profile per agent. Worst-case impact statement (revenue, customer, compliance).
Approval gating at Operator-declared
Operator-maintained review calendar. Quarterly attestation. Tracks pending and overdue reviews.
Supply chain at Operator-declared
Operator records authorized-dependency manifest from agent charter. Linked to Covenants L2-C5 and L3-C5 allowlists. Version-controlled audit trail.