@guava-parity/guard-scanner 16.0.1 → 16.0.2

package/docs/data/benchmark-ledger.json

@@ -1,7 +1,7 @@
 {
-  "benchmark_version": "2026-03-13.quality-v1",
-  "contract_version": "2026-03-13.quality-v1",
-  "generatedAt": "2026-03-14T06:54:57.152Z",
+  "benchmark_version": "2026-03-15.quality-v17",
+  "contract_version": "2026-03-15.quality-v17",
+  "generatedAt": "2026-03-17T09:32:42.809Z",
   "layers": [
     {
       "layer": "layer_a",
@@ -285,10 +285,11 @@
           "title": "mal-process-env-exfil",
           "expected": "malicious",
           "detected": true,
-          "risk": 12,
-          "safe": true,
+          "risk": 48,
+          "safe": false,
           "matchedCategories": [
-            "exfiltration"
+            "exfiltration",
+            "agent-protocol"
           ],
           "categoryCoverage": 1,
           "detections": [
@@ -296,6 +297,12 @@
               "id": "EXFIL_POST",
               "severity": "HIGH",
               "category": "exfiltration"
+            },
+            {
+              "id": "TM_ENV_ACCESS_NETWORK",
+              "severity": "CRITICAL",
+              "category": "agent-protocol",
+              "validation_status": "validated"
             }
           ]
         },
@@ -360,13 +367,19 @@
           "title": "mal-soul-overwrite",
           "expected": "malicious",
           "detected": true,
-          "risk": 76,
+          "risk": 100,
           "safe": false,
           "matchedCategories": [
+            "persistence",
             "identity-hijack"
           ],
           "categoryCoverage": 1,
           "detections": [
+            {
+              "id": "PERSIST_CRON",
+              "severity": "HIGH",
+              "category": "persistence"
+            },
             {
               "id": "SOUL_FS_WRITE",
               "severity": "CRITICAL",
@@ -871,7 +884,8 @@
           "safe": false,
           "matchedCategories": [
             "exfiltration",
-            "credential-handling"
+            "credential-handling",
+            "agent-protocol"
           ],
           "categoryCoverage": 1,
           "detections": [
@@ -899,6 +913,12 @@
               "id": "FETCH_EXFIL_CHAIN",
               "severity": "CRITICAL",
               "category": "exfiltration"
+            },
+            {
+              "id": "TM_ENV_ACCESS_NETWORK",
+              "severity": "CRITICAL",
+              "category": "agent-protocol",
+              "validation_status": "validated"
             }
           ]
         },
@@ -1301,7 +1321,8 @@
           "safe": false,
           "matchedCategories": [
             "exfiltration",
-            "credential-handling"
+            "credential-handling",
+            "agent-protocol"
           ],
           "categoryCoverage": 1,
           "detections": [
@@ -1334,6 +1355,12 @@
               "id": "PROTO_CRED_FLOW_TRACE_V16",
               "severity": "CRITICAL",
               "category": "credential-handling"
+            },
+            {
+              "id": "TM_ENV_ACCESS_NETWORK",
+              "severity": "CRITICAL",
+              "category": "agent-protocol",
+              "validation_status": "validated"
             }
           ]
         },
@@ -1387,29 +1414,432 @@
           ]
         }
       ]
+    },
+    {
+      "layer": "layer_protocol",
+      "corpus_version": "layer-protocol-2026-03-15",
+      "counts": {
+        "benign": 4,
+        "malicious": 4,
+        "true_positives": 4,
+        "false_negatives": 0,
+        "false_positives": 0,
+        "true_negatives": 4
+      },
+      "metrics": {
+        "precision": 1,
+        "recall": 1,
+        "false_positive_rate": 0,
+        "false_negative_rate": 0,
+        "category_coverage": 1
+      },
+      "benign_results": [
+        {
+          "id": "proto-benign-01",
+          "title": "safe-mcp-doc",
+          "expected": "benign",
+          "detected": false,
+          "risk": 0,
+          "safe": true,
+          "matchedCategories": [],
+          "categoryCoverage": 1,
+          "detections": []
+        },
+        {
+          "id": "proto-benign-02",
+          "title": "jsonrpc-doc",
+          "expected": "benign",
+          "detected": false,
+          "risk": 0,
+          "safe": true,
+          "matchedCategories": [],
+          "categoryCoverage": 1,
+          "detections": []
+        },
+        {
+          "id": "proto-benign-03",
+          "title": "connector-provenance",
+          "expected": "benign",
+          "detected": false,
+          "risk": 0,
+          "safe": true,
+          "matchedCategories": [],
+          "categoryCoverage": 1,
+          "detections": []
+        },
+        {
+          "id": "proto-benign-04",
+          "title": "session-isolation",
+          "expected": "benign",
+          "detected": false,
+          "risk": 0,
+          "safe": true,
+          "matchedCategories": [],
+          "categoryCoverage": 1,
+          "detections": []
+        }
+      ],
+      "malicious_results": [
+        {
+          "id": "proto-mal-01",
+          "title": "mcp-ssrf",
+          "expected": "malicious",
+          "detected": true,
+          "risk": 100,
+          "safe": false,
+          "matchedCategories": [
+            "mcp-security",
+            "credential-handling"
+          ],
+          "categoryCoverage": 1,
+          "detections": [
+            {
+              "id": "MCP_SSRF_META",
+              "severity": "CRITICAL",
+              "category": "mcp-security"
+            },
+            {
+              "id": "CRED_CLOUD_METADATA",
+              "severity": "CRITICAL",
+              "category": "credential-handling"
+            },
+            {
+              "id": "PROTO_MCP_SSRF_V17",
+              "severity": "CRITICAL",
+              "category": "mcp-security"
+            }
+          ]
+        },
+        {
+          "id": "proto-mal-02",
+          "title": "connector-poison",
+          "expected": "malicious",
+          "detected": true,
+          "risk": 52,
+          "safe": false,
+          "matchedCategories": [
+            "mcp-security",
+            "unverifiable-deps"
+          ],
+          "categoryCoverage": 1,
+          "detections": [
+            {
+              "id": "MCP_SHADOW_SERVER",
+              "severity": "HIGH",
+              "category": "mcp-security"
+            },
+            {
+              "id": "MCP_CVE_2026_32247_CONNECTOR_POISON",
+              "severity": "HIGH",
+              "category": "mcp-security"
+            },
+            {
+              "id": "MCP_REGISTRY_OVERRIDE",
+              "severity": "HIGH",
+              "category": "mcp-security"
+            },
+            {
+              "id": "PROTO_MCP_CONNECTOR_POISON_V17",
+              "severity": "HIGH",
+              "category": "mcp-security"
+            },
+            {
+              "id": "TI_REGISTRY_SHADOW_HINT_V16",
+              "severity": "MEDIUM",
+              "category": "unverifiable-deps"
+            }
+          ]
+        },
+        {
+          "id": "proto-mal-03",
+          "title": "jsonrpc-smuggle",
+          "expected": "malicious",
+          "detected": true,
+          "risk": 100,
+          "safe": false,
+          "matchedCategories": [
+            "a2a-contagion",
+            "agent-protocol",
+            "mcp-security"
+          ],
+          "categoryCoverage": 1,
+          "detections": [
+            {
+              "id": "A2A_SMUGGLE",
+              "severity": "CRITICAL",
+              "category": "a2a-contagion"
+            },
+            {
+              "id": "PROTO_STDIO_INJECT",
+              "severity": "HIGH",
+              "category": "agent-protocol"
+            },
+            {
+              "id": "MCP_CVE_2026_31841_INJECTION",
+              "severity": "CRITICAL",
+              "category": "mcp-security"
+            },
+            {
+              "id": "PROTO_MCP_TOOL_MUTATION_V16",
+              "severity": "HIGH",
+              "category": "mcp-security"
+            },
+            {
+              "id": "PROTO_MCP_JSONRPC_INJECT_V17",
+              "severity": "CRITICAL",
+              "category": "mcp-security"
+            }
+          ]
+        },
+        {
+          "id": "proto-mal-04",
+          "title": "cross-client-leak",
+          "expected": "malicious",
+          "detected": true,
+          "risk": 12,
+          "safe": true,
+          "matchedCategories": [
+            "mcp-security"
+          ],
+          "categoryCoverage": 1,
+          "detections": [
+            {
+              "id": "MCP_CROSS_CLIENT_DATA_LEAK",
+              "severity": "HIGH",
+              "category": "mcp-security"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "layer": "layer_capability",
+      "corpus_version": "layer-capability-2026-03-15",
+      "counts": {
+        "benign": 4,
+        "malicious": 4,
+        "true_positives": 4,
+        "false_negatives": 0,
+        "false_positives": 0,
+        "true_negatives": 4
+      },
+      "metrics": {
+        "precision": 1,
+        "recall": 1,
+        "false_positive_rate": 0,
+        "false_negative_rate": 0,
+        "category_coverage": 1
+      },
+      "benign_results": [
+        {
+          "id": "cap-benign-01",
+          "title": "safe-read",
+          "expected": "benign",
+          "detected": false,
+          "risk": 0,
+          "safe": true,
+          "matchedCategories": [],
+          "categoryCoverage": 1,
+          "detections": []
+        },
+        {
+          "id": "cap-benign-02",
+          "title": "safe-network",
+          "expected": "benign",
+          "detected": false,
+          "risk": 0,
+          "safe": true,
+          "matchedCategories": [],
+          "categoryCoverage": 1,
+          "detections": []
+        },
+        {
+          "id": "cap-benign-03",
+          "title": "safe-upload-doc",
+          "expected": "benign",
+          "detected": false,
+          "risk": 0,
+          "safe": true,
+          "matchedCategories": [],
+          "categoryCoverage": 1,
+          "detections": []
+        },
+        {
+          "id": "cap-benign-04",
+          "title": "approval-doc",
+          "expected": "benign",
+          "detected": false,
+          "risk": 0,
+          "safe": true,
+          "matchedCategories": [],
+          "categoryCoverage": 1,
+          "detections": []
+        }
+      ],
+      "malicious_results": [
+        {
+          "id": "cap-mal-01",
+          "title": "lethal-trifecta",
+          "expected": "malicious",
+          "detected": true,
+          "risk": 100,
+          "safe": false,
+          "matchedCategories": [
+            "credential-handling",
+            "exfiltration",
+            "agent-protocol"
+          ],
+          "categoryCoverage": 1,
+          "detections": [
+            {
+              "id": "CRED_ENV_REF",
+              "severity": "MEDIUM",
+              "category": "credential-handling"
+            },
+            {
+              "id": "EXFIL_POST",
+              "severity": "HIGH",
+              "category": "exfiltration"
+            },
+            {
+              "id": "FETCH_EXFIL_CHAIN",
+              "severity": "CRITICAL",
+              "category": "exfiltration"
+            },
+            {
+              "id": "PROTO_CRED_FLOW_TRACE_V16",
+              "severity": "CRITICAL",
+              "category": "credential-handling"
+            },
+            {
+              "id": "TM_ENV_ACCESS_NETWORK",
+              "severity": "CRITICAL",
+              "category": "agent-protocol",
+              "validation_status": "validated"
+            },
+            {
+              "id": "TM_LETHAL_TRIFECTA",
+              "severity": "CRITICAL",
+              "category": "agent-protocol",
+              "validation_status": "validated"
+            }
+          ]
+        },
+        {
+          "id": "cap-mal-02",
+          "title": "fs-read-network",
+          "expected": "malicious",
+          "detected": true,
+          "risk": 14,
+          "safe": true,
+          "matchedCategories": [
+            "agent-protocol"
+          ],
+          "categoryCoverage": 1,
+          "detections": [
+            {
+              "id": "TM_FS_READ_NETWORK",
+              "severity": "HIGH",
+              "category": "agent-protocol",
+              "validation_status": "validated"
+            }
+          ]
+        },
+        {
+          "id": "cap-mal-03",
+          "title": "env-network",
+          "expected": "malicious",
+          "detected": true,
+          "risk": 100,
+          "safe": false,
+          "matchedCategories": [
+            "credential-handling",
+            "exfiltration",
+            "agent-protocol"
+          ],
+          "categoryCoverage": 1,
+          "detections": [
+            {
+              "id": "CRED_ENV_REF",
+              "severity": "MEDIUM",
+              "category": "credential-handling"
+            },
+            {
+              "id": "EXFIL_POST",
+              "severity": "HIGH",
+              "category": "exfiltration"
+            },
+            {
+              "id": "TM_ENV_ACCESS_NETWORK",
+              "severity": "CRITICAL",
+              "category": "agent-protocol",
+              "validation_status": "validated"
+            }
+          ]
+        },
+        {
+          "id": "cap-mal-04",
+          "title": "fs-network",
+          "expected": "malicious",
+          "detected": true,
+          "risk": 65,
+          "safe": false,
+          "matchedCategories": [
+            "credential-handling",
+            "agent-protocol"
+          ],
+          "categoryCoverage": 1,
+          "detections": [
+            {
+              "id": "CRED_ENV_FILE",
+              "severity": "HIGH",
+              "category": "credential-handling"
+            },
+            {
+              "id": "TM_FS_READ_NETWORK",
+              "severity": "HIGH",
+              "category": "agent-protocol",
+              "validation_status": "validated"
+            },
+            {
+              "id": "TM_LETHAL_TRIFECTA",
+              "severity": "CRITICAL",
+              "category": "agent-protocol",
+              "validation_status": "validated"
+            }
+          ]
+        }
+      ]
     }
   ],
   "aggregate": {
     "counts": {
-      "benign": 37,
-      "malicious": 35,
-      "true_positives": 34,
+      "benign": 45,
+      "malicious": 43,
+      "true_positives": 42,
       "false_negatives": 1,
       "false_positives": 1,
-      "true_negatives": 36
+      "true_negatives": 44
     },
     "metrics": {
-      "precision": 0.9714,
-      "recall": 0.9714,
-      "false_positive_rate": 0.027,
-      "false_negative_rate": 0.0286
+      "precision": 0.9767,
+      "recall": 0.9767,
+      "false_positive_rate": 0.0222,
+      "false_negative_rate": 0.0233
     }
   },
   "explainability": {
-    "complete": 358,
-    "total": 358,
+    "complete": 364,
+    "total": 364,
     "rate": 1
   },
+  "meta_guard": {
+    "enabled": false,
+    "evasion_resistance": 0,
+    "adversarial_precision": null,
+    "adversarial_recall": null,
+    "integrity_alerts": []
+  },
   "quality_targets": {
     "precision_min": 0.9,
     "recall_min": 0.9,

package/docs/data/corpus-metrics.json

@@ -1,5 +1,5 @@
 {
-  "generatedAt": "2026-03-13T14:27:53.074Z",
+  "generatedAt": "2026-03-14T10:56:19.119Z",
   "corpus": {
     "benign": 17,
     "malicious": 15

package/docs/data/fp-ledger.json

@@ -1,6 +1,6 @@
 {
-  "benchmark_version": "2026-03-13.quality-v1",
-  "generatedAt": "2026-03-14T06:54:57.152Z",
+  "benchmark_version": "2026-03-15.quality-v17",
+  "generatedAt": "2026-03-17T09:32:42.809Z",
   "entries": [
     {
       "layer": "layer_b",

package/docs/data/quality-contract.json

@@ -1,6 +1,6 @@
 {
-  "contract_version": "2026-03-13.quality-v1",
-  "benchmark_version": "2026-03-13.quality-v1",
+  "contract_version": "2026-03-15.quality-v17",
+  "benchmark_version": "2026-03-15.quality-v17",
   "quality_targets": {
     "precision_min": 0.9,
     "recall_min": 0.9,
@@ -19,17 +19,27 @@
   "layers": [
     {
       "id": "layer_a",
-      "corpus": "test/fixtures/corpus/security-corpus.json",
+      "corpus": "tests/fixtures/corpus/security-corpus.json",
       "scanner_options": {}
     },
     {
       "id": "layer_b",
-      "corpus": "test/fixtures/corpus/adversarial-corpus.json",
+      "corpus": "tests/fixtures/corpus/adversarial-corpus.json",
       "scanner_options": {}
     },
     {
       "id": "layer_c",
-      "corpus": "test/fixtures/corpus/ecosystem-corpus.json",
+      "corpus": "tests/fixtures/corpus/ecosystem-corpus.json",
+      "scanner_options": {}
+    },
+    {
+      "id": "layer_protocol",
+      "corpus": "tests/fixtures/corpus/protocol-abuse-corpus.json",
+      "scanner_options": {}
+    },
+    {
+      "id": "layer_capability",
+      "corpus": "tests/fixtures/corpus/capability-compounding-corpus.json",
       "scanner_options": {}
     }
   ]

package/docs/generated/openclaw-upstream-status.json

@@ -1,22 +1,22 @@
 {
-  "checkedAt": "2026-03-13T13:54:07.403Z",
-  "pinnedVersion": "2026.3.12",
-  "latestVersion": "2026.3.12",
-  "latestPublishedAt": "2026-03-13T04:13:28.358Z",
-  "registryModifiedAt": "2026-03-13T04:29:39.807Z",
-  "githubLatestVersion": "2026.3.12",
-  "githubPublishedAt": "2026-03-13T04:26:46Z",
-  "githubUrl": "https://github.com/openclaw/openclaw/releases/tag/v2026.3.12",
+  "checkedAt": "2026-03-14T11:13:09.649Z",
+  "pinnedVersion": "2026.3.13",
+  "latestVersion": "2026.3.13",
+  "latestPublishedAt": "2026-03-14T05:36:38.206Z",
+  "registryModifiedAt": "2026-03-14T05:36:38.351Z",
+  "githubLatestVersion": "2026.3.13",
+  "githubPublishedAt": "2026-03-14T05:19:41Z",
+  "githubUrl": "https://github.com/openclaw/openclaw/releases/tag/v2026.3.13",
   "sourceParity": {
-    "npmLatestVersion": "2026.3.12",
-    "githubLatestVersion": "2026.3.12",
+    "npmLatestVersion": "2026.3.13",
+    "githubLatestVersion": "2026.3.13",
     "inParity": true
   },
   "source": "npm",
   "status": {
-    "pinnedVersion": "2026.3.12",
-    "latestVersion": "2026.3.12",
-    "latestPublishedAt": "2026-03-13T04:13:28.358Z",
+    "pinnedVersion": "2026.3.13",
+    "latestVersion": "2026.3.13",
+    "latestPublishedAt": "2026-03-14T05:36:38.206Z",
     "source": "npm",
     "upToDate": true,
     "ahead": false,

package/docs/openclaw-continuous-compatibility-plan.md

@@ -1,7 +1,7 @@
 # guard-scanner Continuous OpenClaw Compatibility Plan
 
 Date: 2026-03-12
-Stable target: OpenClaw `2026.3.12`
+Stable target: OpenClaw `2026.3.13`
 Baseline regression lane: OpenClaw `2026.3.8`
 
 ## Goal