Agentic Covenants

Recover (RC) · Authorization

Authorization at the in agent layer

advisory · Bypassable by language alone

How do I get back to a known-good state and not repeat this?

What this cell does

(no enforcement)

Deliberately empty

This cell has no artifact, and that is the argument rather than a gap. At this layer, for this concern, nothing is enforced. Populating it with an enforcement claim would invert what the framework is saying.

Cell notes

Restorations, Authorization / In-agent

Empty by design. Real rebuild lives in ../client-side/ (restore hook config from VCS) and ../server-side/ (reapply RBAC/Kyverno/IAM from declarative source, audit drift).