Covenant — the governed connection layer (runtime + premium console)

[reprewindai-dev]

Covenant — the governed connection layer

MCP asks what an agent can do. APIs do it. Neither makes the call itself accountable. Covenant fuses both into one governed call that discovers, authorizes, executes, proves, and learns — and seals a cryptographic proof every time.

The connection is the asset.

This PR is the full implementation: a real, fully-typed TypeScript runtime + a premium, motion-driven console. No mocks, no any.

Runtime (src/lib/covenant)

• Real crypto — per-agent Ed25519 keypairs, canonical request signing + verification, SHA-256 hash-chained evidence ledger (each record links to the prior; the chain is replayable). crypto.ts
• 9-phase pipeline — identity → policy → safety → cost → approval → execution → evidence → audit → response, emitting a full per-phase decision trace. runtime.ts
• Safety — behavioral baselines, statistical anomaly detection (μ+3σ spikes, new-capability, off-hours, failure spikes), trust suppression, quarantine, M-of-N quorum. safety.ts
• Intelligence — cost attribution + budgets, fused risk score → threat level. intelligence.ts
• Governance — three-tier policy composition (system → owner → runtime), conflict detection + deterministic resolution, effective-permission calculation, delegation. governance.ts

Pipeline short-circuits (verified end-to-end)

tampered signature → Phase 1 fail (invalid Ed25519)
no grant for agent → Phase 2 denied (policy)
system-denied purge → Phase 2 denied (immutable guardrail)
payment, no approver → Phase 5 quarantined (M-of-N quorum)
payment + CFO approval → all 9 phases pass, proof sealed

Frontend

A dark instrument panel, not a CRUD admin. Live Console (build → sign → watch all 9 phases decide in real time, expandable reasoning, override toggles), Registry (live discovery), Agents (trust + risk), Ledger (hash chain + replay), Governance (composition + live effective-permissions probe), Safety (anomaly feed + quarantine quorum).

Naming

mcpapi → Covenant. A covenant is a binding, verifiable agreement — exactly what each call becomes. Centralized in src/lib/covenant/brand.ts; renaming is a one-line change.

Checks

npm run lint, npx tsc --noEmit, and npm run build all pass.

Screenshots / screen recording of the live pipeline added in a follow-up comment.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Free

Run ID: 189a62f9-de57-4f77-9eb9-c9218e0bdb08

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Note

🎁 Summarized by CodeRabbit Free

Your organization is on the Free plan. CodeRabbit will generate a high-level summary and a walkthrough for each pull request. For a comprehensive line-by-line review, please upgrade your subscription to CodeRabbit Pro by visiting https://app.coderabbit.ai/login.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}