Agentic Covenants

Identify (ID) · Blast radius

Blast radius at the in agent layer

advisory · Bypassable by language alone

What agents exist, what they touch, what threats they face?

What this cell does

Agent reports declared risk tier, damage cap, forbidden operations from its charter. Reports current environment and data class access.

Cell notes

Inventory, Blast radius / Self-declared

What this cell records. What the agent says about its own scope of damage potential.

Fields

  • - risk_tier (1–4 from charter)
  • - damage_cap (records-per-session, USD-per-day, forbidden ops)
  • - current_environment (dev / staging / prod)
  • - current_data_class (public / internal / confidential / regulated)

Cross-layer

Should equal operator-declared. If self-declared current_environment > operator-declared environments = escalation event.

Citation

NIST CSF 2.0 ID.RA-01. NIST AI RMF MAP 5.1, MAP 5.2.

Crosswalk

NIST CSF 2 0ID.RA-01
NIST AI RMFMAP 5.1, MAP 5.2