The AI Governance Control & Service Exchange Protocol.
A proposed open standard for the secure, interoperable, and verifiable deployment of autonomous AI agents. Submitted to the IETF on 2026-06-07. The full text, revisions and discussion live at covenant.to.
Power in one plane. Governance in another it cannot reach.
The core of the RFC is a strict separation of concerns. The AI operates powerfully in the service plane, but its governance is cryptographically enforced from an external, unreachable governance plane.
Where the AI model lives and works.
Highly dynamic and performant. The agent does its job here, with no access to the keys that govern it.
Configuration, deployment, policy.
Manages configuration, deployment, and policy distribution between the other two planes.
The immutable oversight layer.
Logs actions and enforces constraints cryptographically, outside the AI's reach.
This is what FireControl implements.
Zones, roles, a hardware-key gate for root, a signed stop and an append-only ledger, with a live AIGCSEP compliance level.
