Agentic Covenants / Agentic Sentinels Matrix

Supply chain at Client-side hooks

This layer is deterministic-when-shipped.

MCP allowlist violation events; tool-description hash mismatch alerting; lockfile diff in CI logs centralized; pre-commit dependency scan results.