Skip to content

Agentic Covenants / Agentic Covenants Matrix

Supply chain at In-agent

This layer is advisory.

No enforcement at this layer; advisory only. Model warns about unvetted packages or unfamiliar MCP servers, frequently wrong about provenance. Prevention lives in client-side and server-side.

How it is still bypassed

  • frequently wrong about provenance

Maps to

NIST CSF 2.0
(advisory)
NIST AI RMF
MAP 4.1
OWASP LLM
LLM03
OWASP Agentic
ASI04

Enforcement

controls/supply-chain/in-agent/