@drakon-systems/shieldcortex-realtime 4.53.0 → 4.54.0

package/dist/index.js

@@ -1973,6 +1973,11 @@ export async function scanLlmInput(event, _ctx) {
                     // lets the threat graph attribute taint-raising events). Metadata
                     // only — no content, same as the fields above.
                     tainted: trust.mayTaint,
+                    // Writer-side attestation (attestation Phase 4): the hook identity
+                    // above is a hardcoded literal — no conversation content can reach
+                    // it. RECORD-ONLY at the reader (attribution metadata); the JSONL
+                    // has no integrity, so this claim never feeds risk accrual.
+                    attested: true,
                     ts: new Date().toISOString(),
                 };
                 await auditLog(entry);
@@ -2460,6 +2465,10 @@ export async function handleBeforeAgentRun(event, ctx) {
             decisionRowPersisted = await auditLog({
                 type: decision.outcome === 'unavailable' ? 'scan_unavailable' : 'threat',
                 hook: 'before_agent_run',
+                // Writer-side attestation (attestation Phase 4): hook is a literal;
+                // record-only at the reader, never an accrual input. Stamps the
+                // scan_unavailable variant too (same object) — harmless, same claim.
+                attested: true,
                 eventId,
                 sessionId,
                 model,

package/dist/interceptor.js

@@ -982,7 +982,10 @@ export function createInterceptor(config, pipeline, options) {
         let pipelineDurationMs;
         try {
             const pipelineStart = Date.now();
-            const result = pipeline(content, title, { type: 'agent', identifier: 'openclaw' });
+            // Identity is a plugin-code literal → attested by construction. Hostile
+            // CONTENT that BLOCKs accrues to agent:openclaw — the channel, same
+            // conduit-accrual model as the hooks; advisory soak absorbs it.
+            const result = pipeline(content, title, { type: 'agent', identifier: 'openclaw' }, undefined, undefined, { sourceAttested: true });
             pipelineDurationMs = Date.now() - pipelineStart;
             severity = mapSeverity(result.firewall);
             firewallResult = result.firewall.result;

package/dist/openclaw.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "shieldcortex-realtime",
-  "version": "4.53.0",
+  "version": "4.54.0",
   "name": "ShieldCortex Real-time Scanner",
   "description": "Real-time defence scanning on LLM input, memory extraction on LLM output, and active tool call interception with approval gating.",
   "kind": null,

package/index.ts

@@ -2373,6 +2373,11 @@ export async function scanLlmInput(event: LlmInputEvent, _ctx: AgentCtx): Promis
           // lets the threat graph attribute taint-raising events). Metadata
           // only — no content, same as the fields above.
           tainted: trust.mayTaint,
+          // Writer-side attestation (attestation Phase 4): the hook identity
+          // above is a hardcoded literal — no conversation content can reach
+          // it. RECORD-ONLY at the reader (attribution metadata); the JSONL
+          // has no integrity, so this claim never feeds risk accrual.
+          attested: true,
           ts: new Date().toISOString(),
         };
         await auditLog(entry);
@@ -2978,6 +2983,10 @@ export async function handleBeforeAgentRun(
       decisionRowPersisted = await auditLog({
         type: decision.outcome === 'unavailable' ? 'scan_unavailable' : 'threat',
         hook: 'before_agent_run',
+        // Writer-side attestation (attestation Phase 4): hook is a literal;
+        // record-only at the reader, never an accrual input. Stamps the
+        // scan_unavailable variant too (same object) — harmless, same claim.
+        attested: true,
         eventId,
         sessionId,
         model,

package/interceptor.ts

@@ -650,7 +650,17 @@ function xrayMemoryGuard(content: string, title?: string): XRayGuardResult {
 // Field paths verified against src/defence/types.ts: trust.score (TrustScore.score),
 // sensitivity.level (SensitivityClassification.level), fragmentation.score
 // (FragmentationAnalysis.score; fragmentation itself is nullable).
-type PipelineRunner = (content: string, title: string, source: { type: string; identifier: string }) => {
+type PipelineRunner = (
+  content: string,
+  title: string,
+  source: { type: string; identifier: string },
+  // Optional trailing params of the real runDefencePipeline (config, project,
+  // options). Only options.sourceAttested is used here: the agent:openclaw
+  // identity below is a plugin-code literal, attested by construction.
+  config?: unknown,
+  project?: string,
+  options?: { sourceAttested?: boolean },
+) => {
   allowed: boolean;
   firewall: {
     result: 'ALLOW' | 'BLOCK' | 'QUARANTINE';
@@ -1363,7 +1373,10 @@ export function createInterceptor(
 
     try {
       const pipelineStart = Date.now();
-      const result = pipeline(content, title, { type: 'agent', identifier: 'openclaw' });
+      // Identity is a plugin-code literal → attested by construction. Hostile
+      // CONTENT that BLOCKs accrues to agent:openclaw — the channel, same
+      // conduit-accrual model as the hooks; advisory soak absorbs it.
+      const result = pipeline(content, title, { type: 'agent', identifier: 'openclaw' }, undefined, undefined, { sourceAttested: true });
       pipelineDurationMs = Date.now() - pipelineStart;
       severity = mapSeverity(result.firewall);
       firewallResult = result.firewall.result;

package/openclaw.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "shieldcortex-realtime",
-  "version": "4.53.0",
+  "version": "4.54.0",
   "name": "ShieldCortex Real-time Scanner",
   "description": "Real-time defence scanning on LLM input, memory extraction on LLM output, and active tool call interception with approval gating.",
   "kind": null,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drakon-systems/shieldcortex-realtime",
-  "version": "4.53.0",
+  "version": "4.54.0",
   "description": "OpenClaw plugin for ShieldCortex real-time defence scanning and optional memory extraction.",
   "type": "module",
   "main": "./dist/index.js",