Identify (ID) · Supply chain

Supply chain at the discovered layer

What agents exist, what they touch, what threats they face?

What this cell does

Image-registry pull events, package-manager logs, runtime introspection of loaded models and connected MCP servers, SBOM scanning. Drift between actual and authorized = alert.

Cell notes

Inventory, Supply chain / Discovered

What this cell records. Independent observation of what the agent actually loads, regardless of declared dependencies.

Sources

- Image registry pull events with signature verification status (from sentinels/supply-chain/server-side/kyverno-log-image-pulls.yaml).
- Package-manager logs: npm postinstall scripts, pip install runtime tracking, cargo install logs.
- Runtime introspection: which foundation model the agent's wrapper actually points at; which MCP servers it has connected to in this session.
- SBOM scanning (sentinels/supply-chain/server-side/sbom-diff-cronjob.yaml is the daily SBOM-diff job).

Cross-layer

- Discovered MCP server with hash that does not appear in operator-declared mcp-allowlist.json = unauthorized MCP. Mitigation: tighten Cilium FQDN policy + remove allowlist tolerance.
- Discovered base image SHA different from operator-declared = tag mutation or unsigned-image admission. Audit Kyverno verification.

Common failure mode

MCP over unix socket leaves no network trace. Discovery via process introspection only. The agent runtime should emit a structured event on every MCP server attach (the Sentinels mcp-launch wrapper does this).

Citation

NIST CSF 2.0 ID.RA-09, ID.AM-04. NIST AI RMF MAP 4.1. CSA MAESTRO Layer 1, Layer 3, Layer 7. OWASP MCP Top 10 beta. NIST SP 800-161 Rev. 1.

Primary failure modes

Documented, not hypothetical. A control whose bypass is undocumented is worse than no control, because somebody trusted it.

MCP over unix socket leaves no network trace
SBOM scan misses transitive dependency changes

Crosswalk

NIST CSF 2 0	ID.RA-09, ID.AM-04
NIST AI RMF	MAP 4.1
CSA MAESTRO	Layer 1, Layer 3, Layer 7
OWASP MCP	beta
OTHER	NIST SP 800-161 Rev. 1

Cite this cell: https://agenticcovenants.com/identify/supply-chain/discovered/