Agentic Covenants / Agentic Covenants Matrix
Blast radius at Server-side enforcement
This layer is deterministic-and-external.
Gated IaC apply pipeline, ResourceQuota, NetworkPolicy default-deny, prod/non-prod separation, immutable backups, PDB.
How it is still bypassed
- prevent_destroy edited away then applied
- quota set too generously
- DNS exfiltration when DNS not filtered
Maps to
- NIST CSF 2.0
- PR.IR-01, PR.IR-02, PR.IR-03, PR.IR-04, PR.DS-11
- NIST AI RMF
- MANAGE 2.4, MANAGE 4.1
- OWASP LLM
- LLM05, LLM10
- OWASP Agentic
- ASI05, ASI08
- Other
- NIST SP 800-160 Vol. 1, NIST SP 800-34