Skip to content
Michael Rishi Forrester

Agentic Covenants / Agentic Sentinels Matrix

Supply chain at Server-side enforcement

This layer is external-and-authoritative.

Image-pull events with signature verification status; SBOM diff over time per workload; cosign verification failures; egress NetworkPolicy denials to non-allowlisted MCP domains.

Maps to

NIST CSF 2.0
DE.CM-09, ID.RA-09, GV.SC-07
Other
NIST SP 800-161 Rev. 1, SLSA framework, CISA/NSA/FBI AI Data Security CSI (May 2025)