io.github.jdhart81/agent-covenant

agent-covenant

Deny-by-default authority leases for agents wielding real power.

0.1.1
Version
remote
Transport
7
Tools

Security review

Review passed

Reviewed 2h ago.

  • tools: 7 tools scanned
  • metadata: scanned

No findings.

Tools (7)

  • grant_covenant

    Grant an agent a covenant: an explicit lease of authority. scopes support wildcards ('payments.*', '*'); budget_minor is the total spend ceiling in minor units; expires_at is ISO-8601. Returns the covenant_id.

  • check_act

    Check (and if allowed, record) a proposed act against a covenant. Deny-by-default. Idempotent on act_id — retries never double-consume budget. Every check lands on the audit chain.

  • revoke_covenant

    Revoke a covenant immediately and terminally. All subsequent checks deny.

  • covenant_status

    Current state, consumed/remaining budget, and check count.

  • verify_audit

    Verify the tamper-evident audit chain of allowed/denied acts.

  • list_covenants

    List covenants, optionally filtered by state (ACTIVE|REVOKED|EXPIRED) and/or the bound agent.

  • describe_agent

    Fleet-standard self-description.