Skip to content

Agentic Covenants / Agentic Covenants Matrix

Blast radius at In-agent

This layer is advisory.

No enforcement at this layer; advisory only. Model declines destructive operations — verified failure mode in Kiro, Replit, DataTalks.Club, and Amazon Q (CVE-2025-8217) incidents. Prevention lives in client-side and server-side.

How it is still bypassed

  • documented failure-to-refuse incidents

Maps to

NIST CSF 2.0
(advisory)
NIST AI RMF
MAP 5.1, MEASURE 2.6
OWASP LLM
LLM06
OWASP Agentic
ASI02, ASI05

Enforcement

controls/blast-radius/in-agent/