I've reviewed what the books say.
From HoH:TL, section of the code of hermes describing Wizard's War:
"During a Wizard War both parties can attack each other’s life and property without fear of
prosecution. However, they still may be held to account for any collateral damage. A magus cannot legally attack property in which his opponent has shared ownership, such as covenant buildings, vis sites and covenant books. If a combatant endangers the property or lives of other magi, they forfeit their immunity with respect to those magi. Many covenant sodales are extremely quick to exploit such an opportunity.
A combatant is free to enter his opponent’s sanctum and destroy its contents. Any shared property stored there during a Wizard War is considered forfeit"
From HoH:S, "The Code defines Wizard’s War as a conflict between exactly two wizards. Most wizards in 1220 belong to covenants, which offer protection in the event of Wizard’s War. Although Wizard’s War allows the combatants to step outside the protection of the Code, it does not grant the authority to violate the rights of other wizards. A combatant in Wizard’s War may not lawfully destroy or steal property belonging to wizards other than his opponent, scry on non-combatant magi, or attack non-combatant magi who get in his way. This means a combatant in Wizard’s War can often escape his adversary by hiding inside his covenant. Not only does he gain the protection of any Aegis of the Hearth the covenant may have, his sodales can deny his opponent entry to the covenant.
If the enemy attempts to enter without permission, covenant members may use appropriate force to drive him out (and may be entitled to bring a complaint against him at Tribunal). While they should not simply kill the intruder out of hand, the Code does allow magi to defend their territory.
[...]
Another option is to declare Wizard’s War against the enemy’s sodales or other allies. Each Wizard’s War is legally defined as a conflict between two magi, but there is nothing to prevent a magus from being involved in multiple Wizard’s Wars simultaneously. It is possible to declare separate Wizard’s Wars against every member of a covenant. This allows one to attack the
covenant with legal impunity"
I draw from this that wars against an enemy wizard in another covenant's aegis without declaring war on the entire covenant are things that happen, and that the attacking magi isn't always invited in. There are situations where a covenant can expel a member, or that the attacking magi knocks at the door, gets issued a token and gets escorted into the attacked wizard's sanctum, but there are situations where magi knowingly sneak in and try to get arround the covenant's defenses - I suspect this is a lot easier in a weak Aegis. While a covenant can fight back against the intrusion in common areas / slow him down / impede him, they can't legally slay the attacking magi so long unless they can somehow claim forfeit immunity. So you could have a covenant raising walls of stone, throwing coils of entangling plants, and otherwise trying to physically restrain the intruding magi, but pilums of fire are out so long as the intruding magi doesn't otherwise attack. And most likely, if the attacker reaches the sanctum of the magi who has been declared war on, they're to stop whatever it is they were doing to slow him down so that he may proceed with his war despite the lack of invites. With a high penetration flight / invisibility, it may be possible to reach the sanctum without being caught, and I think that would be legal so long as no one can claim you're using your invisibility to scry on noncombatant magi. On the other hand, destroying the aegis to get through without an invitation is a case where the attacker has forfeited immunity and can be legally slain on covenant ground, or be charged with an hermetic crime even if he escapes. That is, unless he declared war on the entire covenant. Mind you, this is easier in covenants with well layed out geographical separations. If you know you're attacking a sanctum covering the entire third level of the tower to the right, just fly in through a window if you think you can fight without the token. If the covenant is labyrinthine, trying to sneak in is likely not a great option.
Yes, I think we want to clarify it, and I think what you've written is an important step in that direction. There are one or two tidbits to chance, but nothing huge.