The Covenant

What AIGCSEP actually does

• Three-plane isolation Governance, telemetry, and data are kept structurally separate, so a failure or compromise in one can’t cascade into the others.
• The Vault AI agents never hold secrets. Every credential use is proxied through hardware-secured, cryptographically-enforced custody — the agent carries a signed claim of standing, never the keys themselves.
• Virtual Spending Tokens An agent can transact within a bounded, revocable allowance, pseudonymously — never touching the underlying account or identity.
• The Covenant Badge A cryptographic market-access credential, verified at every compliant gateway, that makes participation visible and standing revocable. No valid badge, no market access.
• Emergency Stop A scoped, hierarchical kill switch — authorized humans can halt activity at exactly the level the situation calls for, no more and no less.
• The Silo Model Bad actors aren’t hunted or terminated. They’re simply returned to a pre-Covenant silo — the market itself declines to transact with them.