Agentic Covenants / Agentic Restorations Matrix
Approval gating at Server-side restore
This layer is high-blast-radius.
Re-enable branch protection (enforce_admins true), re-add CODEOWNERS, audit bypass events from incident, unfreeze deployments only after rest of recovery is verified.
Maps to
- NIST CSF 2.0
- RC.RP-01, RC.IM-01, GV.RR-02
- NIST AI RMF
- GOVERN 4.1, MANAGE 4.1
- OWASP Agentic
- ASI02, ASI09
- Other
- EU AI Act Art. 14, Art. 26