Agentic Covenants / Agentic Covenants Matrix
Approval gating at Server-side enforcement
This layer is deterministic-and-external.
Branch protection + PR review, CODEOWNERS, multi-party prod approval, plan-and-apply split, deployment freezes.
How it is still bypassed
- persuasive PR description influencing reviewers
- admin force-push override
- bot accounts approving via misconfigured CODEOWNERS
Maps to
- NIST CSF 2.0
- PR.AA-05, PR.PS-01, GV.RR-02, GV.SC-04
- NIST AI RMF
- GOVERN 4.1, MANAGE 4.1
- OWASP LLM
- LLM06
- OWASP Agentic
- ASI02, ASI03
- Other
- NIST SP 800-160 Vol. 1