Agentic Covenants / Agentic Covenants Matrix
Blast radius at Client-side hooks
This layer is deterministic-when-invoked.
Sandbox at launch (Seatbelt, bubblewrap, gVisor), seccomp/AppArmor, --network none, read-only mounts, dry-run defaults.
How it is still bypassed
- unsandboxed children when inheritance not enforced
- profile gaps
- kernel-level escape
Maps to
- NIST CSF 2.0
- PR.PS-01, PR.PS-05, PR.PS-06, PR.IR-01
- NIST AI RMF
- MANAGE 2.4
- OWASP LLM
- LLM05, LLM10
- OWASP Agentic
- ASI02, ASI05
- Other
- NIST SP 800-160 Vol. 1