Agentic Covenants / Agentic Covenants Matrix
Blast radius at In-agent
This layer is advisory.
No enforcement at this layer; advisory only. Model declines destructive operations — verified failure mode in Kiro, Replit, DataTalks.Club, and Amazon Q (CVE-2025-8217) incidents. Prevention lives in client-side and server-side.
How it is still bypassed
- documented failure-to-refuse incidents
Maps to
- NIST CSF 2.0
- (advisory)
- NIST AI RMF
- MAP 5.1, MEASURE 2.6
- OWASP LLM
- LLM06
- OWASP Agentic
- ASI02, ASI05