Agentic Covenants / Agentic Covenants Matrix
Identity at In-agent
This layer is advisory.
System prompt declares "you are an automation agent named X." Identity is carried, not established. Identity claims made in a system prompt have no cryptographic weight; the agent cannot prove its own identity to the target. Advisory only.
How it is still bypassed
- prompt injection
- jailbreak
- tool-description manipulation via upstream content
Maps to
- NIST CSF 2.0
- (advisory)
- NIST AI RMF
- GOVERN 1.5, MAP 4.1
- OWASP LLM
- LLM07
- OWASP Agentic
- ASI03