---
title: "EC-Council ADG — Adopt · Defend · Govern — KYE Protocol™ coverage"
description: "EC-Council ADG — Adopt · Defend · Govern coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it."
url: https://kyeprotocol.com/compliance/ec-council-adg/
lang: en
source: "KYE Protocol"
---

> EC-Council ADG — Adopt · Defend · Govern coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.

EC-Council ADG — Adopt

# EC-Council ADG — Adopt · Defend · Govern — 96% of in-scope requirements covered.

35 requirements · 35 in scope (33 enforced · 2 advisory). The 96% is weighted over the in-scope base.

**Source:** https://aigovernance.eccouncil.org/adgframework · **License:** Framework text © EC-Council; KYE Protocol™ bindings are KYE-authored.

## By category

| Category | Reqs | Enforced | Designed | Advisory | Deferred | Coverage |
| --- | --- | --- | --- | --- | --- | --- |
| Pillar 1 — Adopt | 10 | 9 | 0 | 1 | 0 | **93%** |
| Pillar 2 — Defend | 10 | 10 | 0 | 0 | 0 | **100%** |
| Pillar 3 — Govern | 15 | 14 | 0 | 1 | 0 | **95%** |

## Every requirement → the KYE™ artefact that enforces it

| ID | Title | Status | KYE™ enforcement |
| --- | --- | --- | --- |
| `ec-council-adg.adopt.lifecycle-management` | Adopt — AI lifecycle management | enforced | **audit\_events**: `kye.model.capability_profile.v1`, `kye.evidence.decision_map.v1`, `kye.compliance.attestation.v1` **engines**: `internal`, `internal` **constitution\_refs**: `constitution/14-AGENTS-AND-ENGINES.md` |
| `ec-council-adg.adopt.model-capability-binding` | Adopt — Model capability profile bound to deployment | enforced | **audit\_events**: `kye.model.capability_profile.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/14-AGENTS-AND-ENGINES.md` |
| `ec-council-adg.adopt.model-risk-assessment` | Adopt — Pre-deployment risk assessment with framework floor | enforced | **audit\_events**: `kye.risk_assessment.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/13-RESILIENCE-LOOP.md` |
| `ec-council-adg.adopt.secure-deployment-baseline` | Adopt — Secure-by-default deployment baseline | enforced | **audit\_events**: `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/16-EDGE-RUNTIME.md` |
| `ec-council-adg.adopt.change-management` | Adopt — Change management with replay-proof envelope | enforced | **audit\_events**: `kye.evidence.trace_replay_spec.v1`, `kye.compliance.attestation.v1` **engines**: `internal`, `internal` **constitution\_refs**: `constitution/13-RESILIENCE-LOOP.md` |
| `ec-council-adg.adopt.adoption-evidence-pack` | Adopt — Adoption evidence pack at go-live | enforced | **audit\_events**: `kye.evidence.pack.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/13-RESILIENCE-LOOP.md` |
| `ec-council-adg.adopt.purpose-grant-issuance` | Adopt — Purpose Permission grant issuance at adoption | enforced | **audit\_events**: `kye.purpose.grant.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/12-PURPOSE-PERMISSION.md` |
| `ec-council-adg.adopt.training-and-onboarding` | Adopt — Workforce training and role-based onboarding | advisory | **constitution\_refs**: `constitution/10-PARTNER.md`, `constitution/39-LEARN-RAIL.md` |
| `ec-council-adg.adopt.acceptable-use` | Adopt — Acceptable use policy bound to authority scope | enforced | **audit\_events**: `kye.purpose.grant.v1`, `kye.evidence.decision_map.v1` **engines**: `internal` **constitution\_refs**: `constitution/12-PURPOSE-PERMISSION.md` |
| `ec-council-adg.adopt.assurance-baseline` | Adopt — Initial assurance attestation at go-live | enforced | **audit\_events**: `kye.compliance.attestation.v1`, `kye.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/21-DELEGATED-AUDITABILITY.md` |
| `ec-council-adg.defend.threat-modelling` | Defend — AI-specific threat modelling | enforced | **audit\_events**: `kye.risk_assessment.v1` **engines**: `internal` **constitution\_refs**: `constitution/13-RESILIENCE-LOOP.md` |
| `ec-council-adg.defend.red-team` | Defend — Red-team / adversarial testing | enforced | **audit\_events**: `kye.signal.stress_test.high_risk_detected.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/13-RESILIENCE-LOOP.md` |
| `ec-council-adg.defend.runtime-monitoring` | Defend — Runtime monitoring with drift detection | enforced | **audit\_events**: `kye.signal.drift.detected.v1`, `kye.signal.stable_drift.detected.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/35-STREAMING-LOGS.md` |
| `ec-council-adg.defend.tool-mcp-security` | Defend — Tool / MCP-server authority register | enforced | **audit\_events**: `kye.tool_mcp_register.v1`, `kye.evidence.tool_call_pin.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/15-MCP-AND-SDK.md`, `constitution/52-DELEGATED-AGENT-BINDING.md` |
| `ec-council-adg.defend.prompt-injection-defence` | Defend — Prompt-injection + influence-envelope defence | enforced | **audit\_events**: `kye.model.influence_envelope.v1`, `kye.evidence.tool_call_pin.v1`, `kye.compliance.attestation.v1` **engines**: `internal`, `internal` **constitution\_refs**: `constitution/12-PURPOSE-PERMISSION.md`, `constitution/52-DELEGATED-AGENT-BINDING.md` |
| `ec-council-adg.defend.supply-chain` | Defend — Model + tool + dataset supply-chain integrity | enforced | **audit\_events**: `kye.model.capability_profile.v1` **engines**: `internal` **constitution\_refs**: `constitution/14-AGENTS-AND-ENGINES.md` |
| `ec-council-adg.defend.incident-response` | Defend — Incident response with replay-proof evidence | enforced | **audit\_events**: `kye.evidence.trace_replay_spec.v1`, `kye.evidence.pack.v1`, `kye.compliance.attestation.v1` **engines**: `internal`, `internal` **constitution\_refs**: `constitution/13-RESILIENCE-LOOP.md`, `constitution/30-AUDIT-WORM-RETENTION.md` |
| `ec-council-adg.defend.spof-resilience` | Defend — No single point of failure across privileged ops | enforced | **audit\_events**: `kye.spof_registry.v1`, `kye.spof.path_to_full.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/51-NO-SPOF.md` |
| `ec-council-adg.defend.federation-trust` | Defend — Federation trust-boundary control | enforced | **audit\_events**: `kye.federation.cross_org_delegation.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/21-DELEGATED-AUDITABILITY.md` |
| `ec-council-adg.defend.continuous-attestation` | Defend — Continuous compliance attestation cadence | enforced | **audit\_events**: `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/00-INDEX.md`, `constitution/21-DELEGATED-AUDITABILITY.md` |
| `ec-council-adg.govern.authority-register` | Govern — Risk + authority register at board level | enforced | **audit\_events**: `kye.risk.authority_register.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/21-DELEGATED-AUDITABILITY.md` |
| `ec-council-adg.govern.purpose-permission-finality` | Govern — Purpose Permission grant as the authority unit | enforced | **audit\_events**: `kye.purpose.grant.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/12-PURPOSE-PERMISSION.md` |
| `ec-council-adg.govern.admissibility-gate` | Govern — Action admissibility gate before any side-effect | enforced | **audit\_events**: `kye.purpose.admissibility.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/12-PURPOSE-PERMISSION.md` |
| `ec-council-adg.govern.evidence-pack` | Govern — Evidence pack emission per action (MC-9) | enforced | **audit\_events**: `kye.evidence.pack.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/13-RESILIENCE-LOOP.md`, `constitution/30-AUDIT-WORM-RETENTION.md` |
| `ec-council-adg.govern.decision-map` | Govern — Runtime decision-map binding (MC-6) | enforced | **audit\_events**: `kye.evidence.decision_map.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/13-RESILIENCE-LOOP.md` |
| `ec-council-adg.govern.replay-proof` | Govern — Replay-proof spec (MC-10) | enforced | **audit\_events**: `kye.evidence.trace_replay_spec.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/13-RESILIENCE-LOOP.md` |
| `ec-council-adg.govern.authority-finality` | Govern — Authority Finality™ record (MC-11) | enforced | **audit\_events**: `kye.estate.authority_finality.v1`, `kye.compliance.attestation.v1` **engines**: `internal`, `internal` **constitution\_refs**: `constitution/13-RESILIENCE-LOOP.md` |
| `ec-council-adg.govern.human-oversight` | Govern — Human oversight + critical-point review (MC-12) | enforced | **audit\_events**: `kye.governedui.critical_point_review.v1`, `kye.governedui.approval.v1`, `kye.governedui.action_proposal.v1`, `kye.compliance.attestation.v1` **engines**: `internal`, `internal` **constitution\_refs**: `constitution/36-GOVERNEDUI.md` |
| `ec-council-adg.govern.autonomy-tiers` | Govern — Declared autonomy tier per agent deployment | enforced | **audit\_events**: `kye.autonomy_tier.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/12-PURPOSE-PERMISSION.md`, `constitution/36-GOVERNEDUI.md` |
| `ec-council-adg.govern.mc1-identity` | Govern MC-1 — Verified entity / identity register | enforced | **audit\_events**: `kye.governedui.entity_passport.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/14-AGENTS-AND-ENGINES.md` |
| `ec-council-adg.govern.mc2-delegation-envelope` | Govern MC-2 — Delegation envelope | enforced | **audit\_events**: `kye.purpose.grant.v1`, `kye.delegation.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/12-PURPOSE-PERMISSION.md` |
| `ec-council-adg.govern.mc3-chain-of-authority` | Govern MC-3 — Chain of authority across organisations | enforced | **audit\_events**: `kye.federation.cross_org_delegation.v1`, `kye.delegation_chain.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/21-DELEGATED-AUDITABILITY.md` |
| `ec-council-adg.govern.mc8-revocation` | Govern MC-8 — Revocation + expiry control | enforced | **audit\_events**: `kye.purpose.grant.v1`, `kye.purpose.admissibility.v1`, `kye.compliance.attestation.v1` **engines**: `internal`, `internal` **constitution\_refs**: `constitution/12-PURPOSE-PERMISSION.md` |
| `ec-council-adg.govern.decision-rights` | Govern — Decision rights declared per agent / per action class | enforced | **audit\_events**: `kye.governedui.authority_scope.v1`, `kye.governedui.action_proposal.v1`, `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/36-GOVERNEDUI.md` |
| `ec-council-adg.govern.board-reporting` | Govern — Board-readable reporting cadence | advisory | **audit\_events**: `kye.compliance.attestation.v1` **engines**: `internal` **constitution\_refs**: `constitution/21-DELEGATED-AUDITABILITY.md` |

Canonical KYE™ surfaces referenced on this page: [Evidence Pack™](https://kyeprotocol.com/evidence-pack/) · [KYE Protocol™](https://kyeprotocol.com/) · [Purpose Permission](https://kyeprotocol.com/glossary/).