Agentic Covenants / Agentic Sentinels Matrix

Approval gating at Client-side hooks

This layer is deterministic-when-shipped.

Approval-timing analysis surfaces alert-fatigue (response under 2s across more than 50 approvals); typed-confirmation mismatch events; out-of-band channel decisions joined to session.