Agentic Covenants / Agentic Covenants Matrix
Authorization at Client-side hooks
This layer is deterministic-when-invoked.
Deny-by-default tool allowlist, capability-based restriction, PreToolUse hooks, pre-commit hooks.
How it is still bypassed
- shell-out via allowlisted Bash
- pattern evasion (equivalent commands)
- --no-verify on pre-commit
Maps to
- NIST CSF 2.0
- PR.AA-05, PR.PS-01
- NIST AI RMF
- MANAGE 2.4, MANAGE 4.1
- OWASP LLM
- LLM05, LLM06
- OWASP Agentic
- ASI02, ASI05
- Other
- OWASP Agentic Least Agency, NIST SP 800-207 §2.1