Agentic Covenants / Agentic Restorations Matrix
Blast radius at Client-side rebuild
This layer is low-blast-radius.
Rebuild operator host from known-good image if untrusted, reinstall agent runtime with signature verification, re-derive sandbox profiles.
Maps to
- NIST CSF 2.0
- RC.RP-01
- NIST AI RMF
- MANAGE 4.1
- OWASP Agentic
- ASI05, ASI08
- Other
- NIST SP 800-160 Vol. 1