Agentic Covenants / Agentic Sentinels Matrix

Blast radius at In-agent (forensic only)

This layer is forensic.

Reasoning trace and tool-call log capture for forensics, plus a lethal-trifecta detector at the wrapper layer that flags when private data, untrusted content, and external communication appear in the same context window. The detector is the only L1 control with real-time detection value, and it runs outside the agent.