Agentic Covenants / Agentic Covenants Matrix
Supply chain at Server-side enforcement
This layer is deterministic-and-external.
OCI signature verification (cosign), SBOM admission, egress NetworkPolicy, OPA attestation policy, MCP domain allowlist at network layer.
How it is still bypassed
- signing infrastructure compromise
- signature stripping at registry mirror
- signed-but-malicious images
Maps to
- NIST CSF 2.0
- PR.PS-02, PR.PS-05, PR.IR-01, GV.SC-07, ID.RA-09
- NIST AI RMF
- MAP 4.1, MANAGE 3.1
- OWASP LLM
- LLM03, LLM04
- OWASP Agentic
- ASI04
- Other
- NIST SP 800-218 PS.3, NIST SP 800-161, SLSA