Agentic Covenants / Agentic Inventory Matrix
Authorization at Discovered
This layer is deterministic-and-external.
K8s RBAC API list, AWS IAM Access Analyzer effective permissions, Kyverno PolicyReports of policies actually applied.
Maps to
- NIST CSF 2.0
- ID.RA-09, ID.RA-01
- NIST AI RMF
- MAP 5.1
- csa_maestro
- Layer 4, Layer 6
- Other
- NIST SP 800-207