Agentic Covenants / Agentic Covenants Matrix
Supply chain at Client-side hooks
This layer is deterministic-when-invoked.
MCP server allowlist with hash pinning, Sigstore verification, lockfile pinning, pre-commit deps scan.
How it is still bypassed
- lockfile rewrite if agent has FS write
- allowlist edited by agent
Maps to
- NIST CSF 2.0
- PR.PS-01, PR.PS-02, GV.SC-07
- NIST AI RMF
- MAP 4.1, MANAGE 3.1
- OWASP LLM
- LLM03, LLM04
- OWASP Agentic
- ASI04, ASI06
- Other
- NIST SP 800-218 PS.2, NIST SP 800-218A