Agentic Covenants / Agentic Covenants Matrix
Approval gating at Client-side hooks
This layer is deterministic-when-invoked.
PreToolUse pattern hooks, tiered config, typed confirmation for tier-3, out-of-band for highest tier, judgment-query escalation.
How it is still bypassed
- alert fatigue
- pattern evasion (kubectl scale --replicas=0)
- flat workflows degrade fastest
Maps to
- NIST CSF 2.0
- PR.AA-05, PR.PS-01
- NIST AI RMF
- MANAGE 4.1
- OWASP LLM
- LLM06
- OWASP Agentic
- ASI02, ASI09
- Other
- OWASP Agentic Least Agency, Russell 2019 (assistance games)