@drakon-systems/shieldcortex-realtime 4.14.11 → 4.16.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "id": "shieldcortex-realtime",
3
- "version": "4.14.11",
3
+ "version": "4.16.0",
4
4
  "name": "ShieldCortex Real-time Scanner",
5
5
  "description": "Real-time defence scanning on LLM input, memory extraction on LLM output, and active tool call interception with approval gating.",
6
6
  "kind": null,
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "id": "shieldcortex-realtime",
3
- "version": "4.14.11",
3
+ "version": "4.16.0",
4
4
  "name": "ShieldCortex Real-time Scanner",
5
5
  "description": "Real-time defence scanning on LLM input, memory extraction on LLM output, and active tool call interception with approval gating.",
6
6
  "kind": null,
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@drakon-systems/shieldcortex-realtime",
3
- "version": "4.14.11",
3
+ "version": "4.16.0",
4
4
  "description": "OpenClaw plugin for ShieldCortex real-time defence scanning and optional memory extraction.",
5
5
  "type": "module",
6
6
  "main": "./dist/index.js",
@@ -30,7 +30,7 @@
30
30
  "pack:verify": "npm pack --dry-run"
31
31
  },
32
32
  "peerDependencies": {
33
- "shieldcortex": "^4.14.11",
33
+ "shieldcortex": "^4.15.0",
34
34
  "openclaw": ">=2026.3.22"
35
35
  },
36
36
  "peerDependenciesMeta": {
@@ -15,3 +15,13 @@ The handler is registered at runtime by the plugin's main entry point
15
15
  `api.registerHook("session_end", ...)` during plugin init. This directory and
16
16
  its `handler.js` exist to satisfy OpenClaw 2026.5.5+'s install-time hook-pack
17
17
  validation; the file in this directory is not what gets invoked at runtime.
18
+
19
+ ## Defence audit guarantees
20
+
21
+ The auto-extract path (`scripts/session-end-hook.mjs`) routes every
22
+ captured candidate through the full defence pipeline before insert. ALLOW
23
+ rows produce a `defence_audit` row with `source_type = 'hook'` and land
24
+ in `memories`. QUARANTINE rows go to the `quarantine` table for review.
25
+ BLOCK rows are dropped with an audit trail. Pipeline failures are also
26
+ audited so no capture is silently lost. See
27
+ `hooks/openclaw/cortex-memory/HOOK.md` for the full guarantees.