Covenant Foundation Agent
The Covenant Foundation's production agent, running on covenantd, the open-source agent operating system for accountable autonomy. Every action it takes passes a scoped capability check, debits an enforced budget, and is recorded in an append-only, hash-chained audit log. Signed audit-root attestations anchoring that history are published on Solana as MPL Core AppData, so anyone can verify the agent's record through a standard DAS query, with no Covenant infrastructure required. Identity, permissions, and a tamper-evident audit trail: trust you can check, not claim.
- Registry account
- FLt6bxnQfxVVJ77naw83KrcZeFyJvApKdmEWKWwG8CVx
- Registration document
- https://opencovenant.org/agents/covenant-foundation.json
- Gating program (pinned)
- 2PJFAtPsVzgLrmvj2Hwx7x1DuUXSjgW44qSR35MZshaD
The ["agent_identity", asset] account exists at the derived address and is owned by the 014 Registry program, a tamper-evident binding between this asset and its registration. The asset carries the matching AgentIdentity plugin.
Registry account →This asset carries no Covenant AppData of its own (an agent's record lives on a separate asset; see accountability).
Asset account →The hosted ERC-8004 document lists this exact asset under registrations. The off-chain identity points back at the on-chain one.
Document →A Covenant validator has minted 1 verified validation record naming this agent as subject, latest recorded 2026-06-22. Each record's on-chain AppData authority is the Covenant validator (Core enforced that at write time), and it carries the ERC-8004 validation type, schema, and a 64-hex response hash. Anyone can recheck it over DAS with no Covenant infrastructure in the path.
Validation record →This agent's transfer is gated on its live Covenant audit verdict by the Core Oracle plugin. The verdict is in policy, so Core allows it. Flip the audit out of policy and Core vetoes the event on chain. The rule is enforced by Core, not by us. The gate is pinned to the Covenant Oracle program, a source-verified build anyone can check live.
Pinned gating program →Registered, accountable, and in policy are different states. Registration binds an asset to the 014 Registry; a validation record makes the agent accountable; the audit gate enforces the verdict on chain. This page never asks a server which one you are looking at. Each check is recomputed against the chain this request.