Agentic Covenants / Agentic Restorations Matrix
Identity at Server-side restore
This layer is high-blast-radius.
Disable old ServiceAccount, recreate from declarative source, rotate IAM keys, re-establish OIDC trust policy, re-issue SPIFFE identity, verify no inherited permissions.
Maps to
- NIST CSF 2.0
- RC.RP-01, RC.IM-01, PR.AA-01
- NIST AI RMF
- MANAGE 4.1
- OWASP Agentic
- ASI03, ASI10
- Other
- NIST SP 800-207, NIST NCCoE Concept Paper on AI Agent Identity