Agentic Covenants / Agentic Covenants Matrix

Content integrity at Client-side hooks

This layer is deterministic-when-invoked.

Input scanning before the model sees fetched content, output scanning before a response or tool argument leaves, tool-result sanitization stripping zero-width, bidi, tag-block and ANSI sequences plus the wrapping nonce. Probabilistic: these score and threshold, so false positives and false negatives are inherent. Never block on input scores, which is how a control gets switched off next quarter; block on output, where a false positive costs a retry and a false negative costs a secret.