Skip to content

Agentic Covenants / Agentic Covenants Matrix

Identity at In-agent

This layer is advisory.

System prompt declares "you are an automation agent named X." Identity is carried, not established. Identity claims made in a system prompt have no cryptographic weight; the agent cannot prove its own identity to the target. Advisory only.

How it is still bypassed

  • prompt injection
  • jailbreak
  • tool-description manipulation via upstream content

Maps to

NIST CSF 2.0
(advisory)
NIST AI RMF
GOVERN 1.5, MAP 4.1
OWASP LLM
LLM07
OWASP Agentic
ASI03

Enforcement

controls/identity/in-agent/