Agentic Covenants / Agentic Restorations Matrix
Authorization at Server-side restore
This layer is high-blast-radius.
Reapply RBAC, Kyverno, IAM from declarative source; audit for drift between cluster state and source.
Maps to
- NIST CSF 2.0
- RC.RP-01, RC.IM-01, PR.AA-05
- NIST AI RMF
- MANAGE 4.1
- OWASP Agentic
- ASI02, ASI03, ASI05
- Other
- NIST SP 800-207, CIS Kubernetes Benchmark