Agentic Covenants / Agentic Inventory Matrix
Supply chain at Discovered
This layer is deterministic-and-external.
Image-registry pull events, package-manager logs, runtime introspection of loaded models and connected MCP servers, SBOM scanning. Drift between actual and authorized = alert.
Maps to
- NIST CSF 2.0
- ID.RA-09, ID.AM-04
- NIST AI RMF
- MAP 4.1
- csa_maestro
- Layer 1, Layer 3, Layer 7
- owasp_mcp
- beta
- Other
- NIST SP 800-161 Rev. 1