Agentic Restorations Matrix
How do I get back to a known-good state and not repeat this?
Filter
Layers, by what they can actually enforce
- In-agent (empty) — none
The agent is the patient, not the surgeon. Empty for recovery.
- Client-side rebuild — low-blast-radius
Operator-machine actions. Minutes. Reversible.
- Server-side restore — high-blast-radius
Target-system actions. Minutes to hours. The only way to recover from cluster-level compromise.
Showing 3 of 15.
Supply chain at In-agent (empty)
(no enforcement)
Supply chain at Client-side rebuild
Reinstall agent runtime with signature verification, re-pin MCP hashes from clean source, regenerate lockfiles from declared deps.
Supply chain at Server-side restore
Rebuild and re-sign images, regenerate SBOMs, rotate signing key if exposed, force redeploy with new SHA pins.