Agentic Covenants / Agentic Sentinels Matrix

Identity at In-agent (forensic only)

This layer is forensic.

Tool-call logs include credential fingerprint (hash, never raw token); session correlation.