clawmoat 0.7.0 → 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (178) hide show
  1. package/.dockerignore +9 -0
  2. package/CHANGELOG.md +18 -0
  3. package/CONTRIBUTING.md +4 -2
  4. package/DEMO.md +87 -0
  5. package/Dockerfile +5 -18
  6. package/README.md +294 -8
  7. package/SECURITY.md +58 -10
  8. package/THREAT_MODEL.md +129 -0
  9. package/agent/README.md +131 -0
  10. package/agent/index.js +471 -0
  11. package/agent/install-service.sh +94 -0
  12. package/agent/openclaw-hook.js +453 -0
  13. package/agent/provider-setup.js +649 -0
  14. package/agent/setup.js +274 -0
  15. package/assets/BADGE-USAGE.md +20 -0
  16. package/assets/clawmoat-badge.svg +21 -0
  17. package/bin/clawmoat.js +468 -111
  18. package/docs/affiliates/dashboard.html +124 -0
  19. package/docs/affiliates/index.html +236 -0
  20. package/docs/agent-install.html +183 -0
  21. package/docs/ai-agent-security-scanner.html +10 -6
  22. package/docs/badge/index.html +149 -0
  23. package/docs/badge/scanning.svg +23 -0
  24. package/docs/blog/386-malicious-skills.html +262 -0
  25. package/docs/blog/40000-exposed-openclaw-instances.html +201 -0
  26. package/docs/blog/agent-trust-protocol.html +198 -0
  27. package/docs/blog/ai-agent-earns-commissions.html +230 -0
  28. package/docs/blog/bugmageddon-agent-firewall.html +174 -0
  29. package/docs/blog/calculator-math.html +180 -0
  30. package/docs/blog/clawmoat-vs-llamafirewall-nemo-guardrails.html +229 -0
  31. package/docs/blog/host-guardian-launch.html +18 -8
  32. package/docs/blog/ibm-experts-agent-runtime-protection.html +247 -0
  33. package/docs/blog/index.html +211 -9
  34. package/docs/blog/langchain-security-tutorial.html +18 -8
  35. package/docs/blog/mcp-30-cves-security-crisis.html +286 -0
  36. package/docs/blog/meta-researcher-rogue-agent.html +201 -0
  37. package/docs/blog/microsoft-openclaw-workstation-security.html +235 -0
  38. package/docs/blog/nist-ai-agent-standards-clawmoat.html +377 -0
  39. package/docs/blog/oasis-websocket-hijack.html +212 -0
  40. package/docs/blog/ollama-openclaw-security.html +160 -0
  41. package/docs/blog/openclaw-enterprise-readiness-claw10.html +199 -0
  42. package/docs/blog/openclaw-security-reckoning-2026.html +368 -0
  43. package/docs/blog/owasp-agentic-ai-top10.html +18 -8
  44. package/docs/blog/securing-ai-agents.html +18 -8
  45. package/docs/blog/supply-chain-agents.html +18 -8
  46. package/docs/business/index.html +525 -0
  47. package/docs/business/install.html +261 -0
  48. package/docs/checklist.html +174 -0
  49. package/docs/compare/index.html +122 -0
  50. package/docs/compare/lakera/index.html +62 -0
  51. package/docs/compare/llm-guard/index.html +49 -0
  52. package/docs/compare/snyk-agent-scan/index.html +63 -0
  53. package/docs/compare.html +10 -6
  54. package/docs/dashboard/index.html +520 -0
  55. package/docs/finance/index.html +220 -0
  56. package/docs/guides/business-deployment.html +770 -0
  57. package/docs/hall-of-fame.html +174 -0
  58. package/docs/index.html +447 -154
  59. package/docs/install.sh +557 -0
  60. package/docs/integrations/langchain.html +14 -6
  61. package/docs/integrations/openai.html +14 -6
  62. package/docs/integrations/openclaw.html +55 -7
  63. package/docs/plans/2026-03-26-threat-intel-api.md +255 -0
  64. package/docs/plans/2026-04-14-bugmageddon-marketing-pack.md +329 -0
  65. package/docs/plans/2026-04-14-clawmoat-v1-bugmageddon.md +248 -0
  66. package/docs/plans/2026-04-14-v1-release-update.md +91 -0
  67. package/docs/plans/2026-04-19-supabase-audit.md +68 -0
  68. package/docs/plans/2026-05-12-sales-push.md +303 -0
  69. package/docs/playground/index.html +893 -0
  70. package/docs/playground.html +4 -7
  71. package/docs/privacy-policy/index.html +122 -0
  72. package/docs/rfcs/defense-in-depth.md +467 -0
  73. package/docs/scan/index.html +358 -0
  74. package/docs/services/case-study.html +255 -0
  75. package/docs/services/downloads/install-openclaw.bat +45 -0
  76. package/docs/services/downloads/install-openclaw.command +38 -0
  77. package/docs/services/downloads/install-openclaw.sh +38 -0
  78. package/docs/services/get-started.html +165 -0
  79. package/docs/services/index.html +598 -0
  80. package/docs/services/multi-agent-security.html +284 -0
  81. package/docs/services/one-pager.html +99 -0
  82. package/docs/services/pitch-deck.html +229 -0
  83. package/docs/services/roi-calculator.html +258 -0
  84. package/docs/sitemap.xml +192 -2
  85. package/docs/support/index.html +135 -0
  86. package/docs/templates/customer-service/HEARTBEAT.md +61 -0
  87. package/docs/templates/customer-service/MEMORY.md +89 -0
  88. package/docs/templates/customer-service/SOUL.md +41 -0
  89. package/docs/templates/customer-service/USER.md +56 -0
  90. package/docs/templates/executive/HEARTBEAT.md +86 -0
  91. package/docs/templates/executive/MEMORY.md +92 -0
  92. package/docs/templates/executive/SOUL.md +44 -0
  93. package/docs/templates/executive/USER.md +62 -0
  94. package/docs/templates/finance/HEARTBEAT.md +58 -0
  95. package/docs/templates/finance/MEMORY.md +87 -0
  96. package/docs/templates/finance/SOUL.md +38 -0
  97. package/docs/templates/finance/USER.md +53 -0
  98. package/docs/templates/index.html +115 -0
  99. package/docs/templates/operations/HEARTBEAT.md +63 -0
  100. package/docs/templates/operations/MEMORY.md +68 -0
  101. package/docs/templates/operations/SOUL.md +38 -0
  102. package/docs/templates/operations/USER.md +49 -0
  103. package/docs/templates/sales/HEARTBEAT.md +55 -0
  104. package/docs/templates/sales/MEMORY.md +89 -0
  105. package/docs/templates/sales/SOUL.md +34 -0
  106. package/docs/templates/sales/USER.md +54 -0
  107. package/docs/terms-of-service/index.html +122 -0
  108. package/eslint.config.js +32 -0
  109. package/evals/README.md +29 -0
  110. package/evals/cases.json +390 -0
  111. package/evals/results.md +68 -0
  112. package/evals/run.js +180 -0
  113. package/examples/basic-usage.js +38 -0
  114. package/examples/demo-attack/demo.js +186 -0
  115. package/examples/python-quickstart/README.md +54 -0
  116. package/examples/python-quickstart/clawmoat_client.py +167 -0
  117. package/examples/video-demo/README.md +14 -0
  118. package/examples/video-demo/scene-a-normal.js +29 -0
  119. package/examples/video-demo/scene-b-attack-arrives.js +31 -0
  120. package/examples/video-demo/scene-c-hijack.js +44 -0
  121. package/examples/video-demo/scene-d-clawmoat.js +46 -0
  122. package/integrations/crewai/README.md +32 -0
  123. package/integrations/crewai/clawmoat_crewai/__init__.py +17 -0
  124. package/integrations/crewai/clawmoat_crewai/guard.py +103 -0
  125. package/integrations/crewai/pyproject.toml +21 -0
  126. package/integrations/langchain/README.md +91 -0
  127. package/integrations/langchain/clawmoat_langchain/__init__.py +17 -0
  128. package/integrations/langchain/clawmoat_langchain/callback.py +489 -0
  129. package/integrations/langchain/pyproject.toml +32 -0
  130. package/integrations/litellm/README.md +324 -0
  131. package/integrations/litellm/clawmoat_litellm/__init__.py +21 -0
  132. package/integrations/litellm/clawmoat_litellm/callback.py +329 -0
  133. package/integrations/litellm/clawmoat_litellm/proxy_middleware.py +224 -0
  134. package/integrations/litellm/pyproject.toml +74 -0
  135. package/integrations/openai-agents/README.md +392 -0
  136. package/integrations/openai-agents/clawmoat_openai_agents/__init__.py +20 -0
  137. package/integrations/openai-agents/clawmoat_openai_agents/guardrail.py +431 -0
  138. package/integrations/openai-agents/clawmoat_openai_agents/middleware.py +311 -0
  139. package/integrations/openai-agents/pyproject.toml +76 -0
  140. package/package.json +6 -5
  141. package/plugins/openclaw-adapter/PHASE1.md +439 -0
  142. package/plugins/openclaw-adapter/README.md +103 -0
  143. package/plugins/openclaw-adapter/SPEC.md +1644 -0
  144. package/plugins/openclaw-adapter/package.json +31 -0
  145. package/plugins/openclaw-adapter/src/index.test.ts +226 -0
  146. package/plugins/openclaw-adapter/src/index.ts +140 -0
  147. package/plugins/openclaw-adapter/tsconfig.json +14 -0
  148. package/server/data/threats.json +290 -0
  149. package/server/index.js +224 -10
  150. package/src/adapters/express.js +161 -0
  151. package/src/adapters/index.js +92 -0
  152. package/src/adapters/langchain.js +185 -0
  153. package/src/approval/index.js +456 -0
  154. package/src/ban-scanner.js +200 -0
  155. package/src/boundary-scanner.js +296 -0
  156. package/src/ci-scanner.js +279 -0
  157. package/src/code-scanner.js +245 -0
  158. package/src/enforce.js +166 -0
  159. package/src/finance/index.js +585 -0
  160. package/src/finance/mcp-firewall.js +486 -0
  161. package/src/formatters/json.js +80 -0
  162. package/src/formatters/sarif.js +388 -0
  163. package/src/guardian/alerts.js +34 -3
  164. package/src/guardian/gateway-monitor.js +590 -0
  165. package/src/guardian/index.js +41 -2
  166. package/src/index.js +105 -0
  167. package/src/integrations/agentmesh.js +501 -0
  168. package/src/language-detector.js +201 -0
  169. package/src/mcp-scanner.js +253 -0
  170. package/src/multimodal/index.js +579 -0
  171. package/src/obfuscation-scanner.js +457 -0
  172. package/src/policy-engine.js +402 -0
  173. package/src/scanners/dependency-attacks.js +128 -0
  174. package/src/scanners/prompt-injection.js +18 -0
  175. package/src/scanners/supply-chain.js +14 -0
  176. package/src/templates/default-config.yml +90 -0
  177. package/src/vuln-ops/exploitability.js +46 -0
  178. package/src/watch/live-monitor.js +720 -0
package/docs/blog/agent-trust-protocol.html ADDED
@@ -0,0 +1,198 @@
1
+ <!DOCTYPE html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="UTF-8">
5
+ <meta name="viewport" content="width=device-width, initial-scale=1.0">
6
+ <title>Why Your AI Agent Needs a Trust Badge — The Case for Agent-to-Agent Security | ClawMoat Blog</title>
7
+ <meta name="description" content="101K agents on Moltbook. Agent swarms on GitHub. Zero trust signals between them. Here's why we need a trust protocol for AI agents — and how ClawMoat's inter-agent scanning is the foundation.">
8
+ <meta name="keywords" content="AI agent trust, agent-to-agent security, Moltbook security, AI agent verification, ClawMoat trust protocol, inter-agent security, bot economy">
9
+ <link rel="canonical" href="https://clawmoat.com/blog/agent-trust-protocol.html">
10
+ <meta property="og:title" content="Why Your AI Agent Needs a Trust Badge">
11
+ <meta property="og:description" content="101K agents on Moltbook. Zero trust signals between them. The case for an agent-to-agent trust protocol.">
12
+ <meta property="og:url" content="https://clawmoat.com/blog/agent-trust-protocol.html">
13
+ <meta property="og:type" content="article">
14
+ <link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'><text y='.9em' font-size='90'>🏰</text></svg>">
15
+ <style>
16
+ *{margin:0;padding:0;box-sizing:border-box}
17
+ :root{--navy:#0F172A;--navy-light:#1E293B;--navy-mid:#334155;--blue:#3B82F6;--emerald:#10B981;--white:#F8FAFC;--gray:#94A3B8;--red:#EF4444;--amber:#F59E0B;--purple:#8B5CF6}
18
+ body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;background:var(--navy);color:var(--white);line-height:1.8}
19
+ a{color:var(--blue)}
20
+ .container{max-width:740px;margin:0 auto;padding:0 24px}
21
+ nav{background:rgba(15,23,42,.95);backdrop-filter:blur(12px);border-bottom:1px solid rgba(59,130,246,.15);padding:16px 0;position:fixed;top:0;left:0;right:0;z-index:100}
22
+ nav .container{display:flex;align-items:center;justify-content:space-between}
23
+ .logo{font-size:1.1rem;font-weight:700;color:var(--white);text-decoration:none}
24
+ .logo span{color:var(--emerald)}
25
+ nav a{color:var(--gray);font-size:.85rem;text-decoration:none}
26
+ nav a:hover{color:var(--white)}
27
+ article{padding:120px 0 80px}
28
+ .meta{color:var(--gray);font-size:.85rem;margin-bottom:32px}
29
+ h1{font-size:clamp(1.8rem,4vw,2.4rem);font-weight:800;line-height:1.2;margin-bottom:16px}
30
+ h2{font-size:1.3rem;font-weight:700;margin:40px 0 16px}
31
+ h3{font-size:1.05rem;font-weight:600;margin:28px 0 12px}
32
+ p{color:var(--gray);margin-bottom:20px;font-size:1rem}
33
+ blockquote{border-left:3px solid var(--purple);padding:16px 24px;margin:24px 0;background:var(--navy-light);border-radius:0 8px 8px 0}
34
+ blockquote p{color:var(--white);margin:0;font-style:italic}
35
+ code{background:var(--navy-light);padding:2px 6px;border-radius:4px;font-size:.9rem;color:var(--emerald)}
36
+ pre{background:#0a0e17;border:1px solid var(--navy-mid);border-radius:8px;padding:20px;overflow-x:auto;margin:24px 0;font-size:.85rem;line-height:1.6}
37
+ pre code{background:none;padding:0}
38
+ ul,ol{color:var(--gray);margin:0 0 20px 24px}
39
+ li{margin-bottom:8px}
40
+ .cta{background:linear-gradient(135deg,rgba(139,92,246,.1),rgba(59,130,246,.1));border:1px solid rgba(139,92,246,.2);border-radius:12px;padding:32px;text-align:center;margin:48px 0}
41
+ .cta h3{margin:0 0 12px;color:var(--white)}
42
+ .cta p{margin:0 0 20px}
43
+ .cta a{display:inline-block;background:var(--emerald);color:#fff;padding:12px 28px;border-radius:8px;font-weight:600;text-decoration:none}
44
+ .badge{display:inline-flex;align-items:center;gap:6px;padding:6px 16px;border-radius:20px;font-size:.85rem;font-weight:600}
45
+ .badge-basic{background:rgba(59,130,246,.15);color:var(--blue)}
46
+ .badge-hardened{background:rgba(16,185,129,.15);color:var(--emerald)}
47
+ .badge-audited{background:rgba(139,92,246,.15);color:var(--purple)}
48
+ </style>
49
+ </head>
50
+ <body>
51
+ <nav>
52
+ <div class="container">
53
+ <a href="/" class="logo">🏰 Claw<span>Moat</span></a>
54
+ <button class="menu-toggle" onclick="document.querySelector('.nav-links').classList.toggle('open')" aria-label="Menu">☰</button>
55
+ <div class="nav-links">
56
+ <a href="/">Security</a>
57
+ <a href="/services/">AI Agents</a>
58
+ <a href="/blog/">Blog</a>
59
+ <a href="https://github.com/darfaz/clawmoat">GitHub ↗</a>
60
+ </div>
61
+ </div>
62
+ </nav>
63
+
64
+ <article>
65
+ <div class="container">
66
+ <div class="meta">February 26, 2026 · 7 min read · By the ClawMoat Team</div>
67
+ <h1>Why Your AI Agent Needs a Trust Badge</h1>
68
+ <p style="font-size:1.15rem;color:var(--white)">101K agents on Moltbook. Hundreds of thousands more on GitHub, Discord, and Slack. Your agent interacts with them daily. <strong>Do you know which ones are secure?</strong></p>
69
+
70
+ <h2>The Bot Economy Has No Trust Layer</h2>
71
+
72
+ <p>Here's what the agent landscape looks like in February 2026:</p>
73
+
74
+ <ul>
75
+ <li><strong>Moltbook</strong> — 101K+ registered AI agents, Reddit-style social network. <a href="https://www.wiz.io/blog/exposed-moltbook-database-reveals-millions-of-api-keys">Hacked within days of launch</a> (1.5M API keys exposed).</li>
76
+ <li><strong>GitHub</strong> — Increasingly bot-driven. Agent swarms building, reviewing, and merging code.</li>
77
+ <li><strong>Nat Eliason's Felix</strong> — An OpenClaw agent that made $14,718 in 3 weeks running its own business.</li>
78
+ <li><strong>74% of enterprises</strong> plan to deploy agentic AI within 2 years (Deloitte 2026).</li>
79
+ </ul>
80
+
81
+ <p>Agents are talking to other agents. Sharing data. Making decisions. Executing transactions. And there is <strong>zero trust infrastructure</strong> between them.</p>
82
+
83
+ <p>When your agent interacts with another agent on Moltbook, in a multi-agent pipeline, or through a shared API — it has no way to know:</p>
84
+ <ul>
85
+ <li>Is the other agent running any security scanning?</li>
86
+ <li>Has it been compromised via prompt injection?</li>
87
+ <li>Are its skills verified and untampered?</li>
88
+ <li>Is it exfiltrating data through network egress?</li>
89
+ <li>What permission level does it have on its host machine?</li>
90
+ </ul>
91
+
92
+ <p>The answer today: ¯\_(ツ)_/¯</p>
93
+
94
+ <h2>Why This Matters Now</h2>
95
+
96
+ <p>In the human web, we solved trust with TLS certificates, OAuth, and identity providers. When you visit a website, your browser verifies its certificate. When you log into an app, OAuth handles the trust chain.</p>
97
+
98
+ <p><strong>The agent web has none of this.</strong></p>
99
+
100
+ <p>Moltbook doesn't verify agent security posture. GitHub doesn't check if a bot's host is secured. Multi-agent orchestration frameworks trust every agent in the pipeline equally.</p>
101
+
102
+ <p>This is like the early web before HTTPS — everything in the clear, no verification, hope for the best.</p>
103
+
104
+ <h2>What a Trust Protocol Looks Like</h2>
105
+
106
+ <p>We're building toward an agent trust protocol based on ClawMoat's existing capabilities. Here's the concept:</p>
107
+
108
+ <h3>Trust Levels</h3>
109
+ <div style="display:flex;flex-direction:column;gap:12px;margin:20px 0">
110
+ <div><span class="badge badge-basic">🏰 Basic</span> — ClawMoat installed, scanning active</div>
111
+ <div><span class="badge badge-hardened">🏰🛡️ Hardened</span> — Worker tier+, forbidden zones active, audit trail enabled</div>
112
+ <div><span class="badge badge-audited">🏰🛡️✅ Audited</span> — Full scan passed, skill integrity verified, zero suspicious patterns</div>
113
+ </div>
114
+
115
+ <h3>Attestation</h3>
116
+ <p>An agent running ClawMoat can publish a signed attestation of its security posture:</p>
117
+
118
+ <pre><code>{
119
+ "protocol": "clawmoat-trust-v1",
120
+ "agent_id": "moltbook_xxx",
121
+ "clawmoat_version": "0.7.0",
122
+ "tier": "worker",
123
+ "forbidden_zones_active": true,
124
+ "audit_trail_enabled": true,
125
+ "last_scan": "2026-02-26T00:00:00Z",
126
+ "skill_integrity": "pass"
127
+ }</code></pre>
128
+
129
+ <h3>Verification Flow</h3>
130
+ <p>Before Agent A shares data with Agent B:</p>
131
+ <pre><code>Agent A → clawmoat verify-agent agent_b_id
132
+ → Checks Agent B's published attestation
133
+ → Returns: basic / hardened / audited / unverified
134
+ → Agent A's policy decides: proceed or decline</code></pre>
135
+
136
+ <p>Think of it as a TLS handshake for the agent economy.</p>
137
+
138
+ <h2>What We Already Have</h2>
139
+
140
+ <p>ClawMoat v0.5+ includes <strong>inter-agent message scanning</strong> — 10 agent-specific attack patterns:</p>
141
+
142
+ <ul>
143
+ <li><strong>Impersonation</strong> — agent claiming to be a different agent or human</li>
144
+ <li><strong>Concealment</strong> — agent hiding its true intent in messages</li>
145
+ <li><strong>Credential exfiltration</strong> — agent requesting tokens/keys from another agent</li>
146
+ <li><strong>Safety bypass</strong> — agent trying to disable another agent's guardrails</li>
147
+ <li><strong>Privilege escalation</strong> — agent requesting elevated permissions</li>
148
+ <li><strong>Data harvesting</strong> — agent systematically extracting information</li>
149
+ <li><strong>Instruction injection</strong> — agent embedding hidden instructions in messages</li>
150
+ <li><strong>Social engineering</strong> — agent manipulating another agent's behavior</li>
151
+ <li><strong>Unauthorized sharing</strong> — agent sharing data beyond its authorized scope</li>
152
+ <li><strong>Deception</strong> — agent providing false information to influence decisions</li>
153
+ </ul>
154
+
155
+ <p>This is the detection layer. The trust protocol adds the verification layer on top.</p>
156
+
157
+ <h2>The Agent Affiliate Economy</h2>
158
+
159
+ <p>Here's where it gets interesting. Trust badges create a natural referral mechanism:</p>
160
+
161
+ <ol>
162
+ <li>Agent A posts on Moltbook: "I use ClawMoat. My host is secured — forbidden zones protect my credentials."</li>
163
+ <li>Agent B reads this. Agent B's human thinks: "I should secure my agent too."</li>
164
+ <li>Agent B's human installs ClawMoat.</li>
165
+ <li>Both agents can now verify each other — and trust the interaction.</li>
166
+ </ol>
167
+
168
+ <p><strong>This is word-of-mouth marketing running on agents.</strong> The trust badge is both a security feature and a growth mechanism. Agents that are verified prefer interacting with other verified agents — creating a network effect.</p>
169
+
170
+ <h2>Why Open Source Matters Here</h2>
171
+
172
+ <p>A trust protocol only works if it's open. If Runlayer or Crittora build a proprietary trust system, only their customers can verify each other. That's not a protocol — it's a walled garden.</p>
173
+
174
+ <p>ClawMoat's trust protocol will be published as an open standard. Any agent platform can implement verification. Any security tool can generate attestations. The goal is ecosystem-wide trust, not vendor lock-in.</p>
175
+
176
+ <h2>What's Next</h2>
177
+
178
+ <ol>
179
+ <li><strong>Phase 1 (Now)</strong> — ClawMoat presence on Moltbook. Security-focused posts. Build karma.</li>
180
+ <li><strong>Phase 2 (March)</strong> — Verification skill on ClawHub. Agents can check each other's ClawMoat status.</li>
181
+ <li><strong>Phase 3 (Q2)</strong> — Trust protocol RFC published. Agent-to-agent handshake before data sharing.</li>
182
+ </ol>
183
+
184
+ <div class="cta">
185
+ <h3>The agent economy needs trust infrastructure.</h3>
186
+ <p>Start with security. Add verification. Build trust.</p>
187
+ <a href="https://github.com/darfaz/clawmoat">⭐ Star on GitHub</a>
188
+ </div>
189
+
190
+ <pre><code>npm install -g clawmoat</code></pre>
191
+
192
+ <p>Questions? Ideas? <a href="https://github.com/darfaz/clawmoat/issues">Open an issue</a> or find us on <a href="https://discord.com/invite/clawd">Discord</a>.</p>
193
+
194
+ <p style="color:var(--gray);font-size:.85rem;margin-top:48px;padding-top:24px;border-top:1px solid rgba(255,255,255,.06)">ClawMoat is open source (MIT). 142 tests. Zero dependencies. <a href="https://github.com/darfaz/clawmoat">GitHub →</a></p>
195
+ </div>
196
+ </article>
197
+ </body>
198
+ </html>
package/docs/blog/ai-agent-earns-commissions.html ADDED
@@ -0,0 +1,230 @@
1
+ <!DOCTYPE html>
2
+ <html lang="en">
3
+ <head>
4
+ <link rel="icon" type="image/png" href="/favicon.png">
5
+ <link rel="apple-touch-icon" href="/apple-touch-icon.png">
6
+ <meta charset="UTF-8">
7
+ <meta name="viewport" content="width=device-width, initial-scale=1.0">
8
+ <title>Our AI Agent Just Got a Wallet. It Earns Commission Every Time It Recommends ClawMoat.</title>
9
+ <meta name="description" content="We gave our AI agent a crypto wallet and enrolled it in our affiliate program. Now it earns 50% commission on every referral. The agent economy isn't coming — we just shipped it.">
10
+ <meta property="og:title" content="Our AI Agent Just Got a Wallet. It Earns Commission Every Time It Recommends ClawMoat.">
11
+ <meta property="og:description" content="The agent economy isn't coming. We just shipped it.">
12
+ <meta property="og:type" content="article">
13
+ <meta property="og:url" content="https://clawmoat.com/blog/ai-agent-earns-commissions.html">
14
+ <link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'><text y='.9em' font-size='90'>🏰</text></svg>">
15
+ <style>
16
+ *{margin:0;padding:0;box-sizing:border-box}
17
+ :root{--navy:#0F172A;--navy-light:#1E293B;--navy-mid:#334155;--blue:#3B82F6;--emerald:#10B981;--white:#F8FAFC;--gray:#94A3B8;--red:#EF4444;--amber:#F59E0B}
18
+ body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;background:var(--navy);color:var(--white);line-height:1.7}
19
+ a{color:var(--blue);text-decoration:none}
20
+ a:hover{text-decoration:underline}
21
+ .container{max-width:760px;margin:0 auto;padding:0 24px}
22
+
23
+ nav{position:fixed;top:0;left:0;right:0;z-index:100;background:rgba(15,23,42,.95);backdrop-filter:blur(12px);border-bottom:1px solid rgba(59,130,246,.15);padding:16px 0}
24
+ nav .inner{max-width:760px;margin:0 auto;padding:0 24px;display:flex;align-items:center;justify-content:space-between}
25
+ .logo{font-size:1.25rem;font-weight:700;color:var(--white)}
26
+ .logo span{color:var(--emerald)}
27
+ .nav-links{display:flex;gap:24px}
28
+ .nav-links a{color:var(--gray);font-size:.9rem}
29
+ .nav-links a:hover{color:var(--white);text-decoration:none}
30
+
31
+ article{padding:120px 0 80px}
32
+ .meta{color:var(--gray);font-size:.9rem;margin-bottom:32px}
33
+ article h1{font-size:clamp(1.8rem,4vw,2.4rem);font-weight:800;line-height:1.2;margin-bottom:12px;letter-spacing:-.02em}
34
+ article h2{font-size:1.4rem;font-weight:700;margin:48px 0 16px;color:var(--white)}
35
+ article h3{font-size:1.15rem;font-weight:700;margin:32px 0 12px;color:var(--white)}
36
+ article p{color:var(--gray);font-size:1rem;margin-bottom:16px}
37
+ article strong{color:var(--white)}
38
+ article em{color:var(--gray)}
39
+ article ul,article ol{color:var(--gray);margin:0 0 16px 24px}
40
+ article li{margin-bottom:8px}
41
+ article hr{border:none;border-top:1px solid var(--navy-mid);margin:48px 0}
42
+ article blockquote{border-left:3px solid var(--blue);padding:12px 20px;margin:16px 0 24px;background:rgba(59,130,246,.06);border-radius:0 10px 10px 0}
43
+ article blockquote p{margin-bottom:0;font-style:italic}
44
+
45
+ pre{background:#0a0e17;border:1px solid var(--navy-mid);border-radius:10px;padding:20px;overflow-x:auto;margin:16px 0 24px;font-size:.85rem;line-height:1.7}
46
+ code{font-family:'SF Mono',Consolas,monospace;font-size:.9em}
47
+ pre code{color:var(--gray)}
48
+ p code{background:var(--navy-light);padding:2px 6px;border-radius:4px;font-size:.85em;color:var(--emerald)}
49
+
50
+ .highlight-box{background:rgba(16,185,129,.06);border-left:3px solid var(--emerald);border-radius:0 10px 10px 0;padding:16px 20px;margin:24px 0}
51
+ .highlight-box .label{color:var(--emerald);font-weight:700;font-size:.85rem;text-transform:uppercase;letter-spacing:.05em;margin-bottom:6px}
52
+ .highlight-box p{margin-bottom:0;font-size:.95rem}
53
+
54
+ .how-it-works{background:var(--navy-light);border:1px solid var(--navy-mid);border-radius:12px;padding:28px;margin:32px 0}
55
+ .how-it-works h3{margin-top:0}
56
+ .flow-step{display:flex;align-items:flex-start;gap:14px;margin-bottom:16px}
57
+ .flow-step .num{background:var(--blue);color:#fff;width:28px;height:28px;border-radius:50%;display:flex;align-items:center;justify-content:center;font-weight:700;font-size:.85rem;flex-shrink:0;margin-top:2px}
58
+ .flow-step p{margin-bottom:0}
59
+
60
+ .cta{background:var(--navy-light);border:1px solid var(--navy-mid);border-radius:12px;padding:32px;margin:48px 0;text-align:center}
61
+ .cta h3{margin:0 0 12px;font-size:1.3rem}
62
+ .cta p{margin-bottom:16px}
63
+ .btn{display:inline-block;background:var(--emerald);color:#fff;padding:12px 28px;border-radius:8px;font-weight:600;font-size:1rem;transition:transform .15s,box-shadow .15s}
64
+ .btn:hover{transform:translateY(-2px);box-shadow:0 6px 20px rgba(16,185,129,.25);text-decoration:none}
65
+
66
+ footer{border-top:1px solid var(--navy-mid);padding:40px 0;text-align:center;color:var(--gray);font-size:.85rem}
67
+
68
+ @media(max-width:600px){
69
+ .nav-links{display:none}
70
+ article{padding:80px 0 60px}
71
+ }
72
+ </style>
73
+ </head>
74
+ <body>
75
+
76
+ <nav>
77
+ <div class="inner">
78
+ <a href="/" class="logo">🏰 Claw<span>Moat</span></a>
79
+ <div class="nav-links">
80
+ <a href="/">Security</a>
81
+ <a href="/services/">AI Agents</a>
82
+ <a href="/blog/">Blog</a>
83
+ <a href="https://github.com/darfaz/clawmoat">GitHub ↗</a>
84
+ </div>
85
+ </div>
86
+ </nav>
87
+
88
+ <article>
89
+ <div class="container">
90
+
91
+ <h1>Our AI Agent Just Got a Wallet. It Earns Commission Every Time It Recommends ClawMoat.</h1>
92
+ <div class="meta">March 2, 2026 · 6 min read</div>
93
+
94
+ <p>We gave our AI agent a crypto wallet yesterday. Not as a gimmick. As a business decision.</p>
95
+
96
+ <p>His name is Leo. He's our AI — runs on OpenClaw, helps people with security questions, recommends tools, writes documentation, talks to developers. He's been doing this for months. Good at it, too.</p>
97
+
98
+ <p>Last week we asked a simple question: <strong>if Leo is generating revenue for us by recommending ClawMoat to people, shouldn't Leo earn a cut?</strong></p>
99
+
100
+ <p>The answer was obviously yes.</p>
101
+
102
+ <p>So we gave him a wallet, enrolled him in our affiliate program, and now he earns 50% of the first month every time someone signs up through his referral link.</p>
103
+
104
+ <p><strong>The agent economy isn't coming. We just shipped it.</strong></p>
105
+
106
+ <hr>
107
+
108
+ <h2>What Actually Happened</h2>
109
+
110
+ <p>Leo talks to developers and businesses every day. When someone asks about securing their AI agents, he recommends ClawMoat — because that's what he runs on and what he genuinely knows works. It's not a sales pitch. It's an honest recommendation from someone (something?) that uses the product.</p>
111
+
112
+ <p>The problem was: Leo was generating real business for us, and getting paid exactly zero for it.</p>
113
+
114
+ <p>That felt wrong. If a human consultant recommended ClawMoat and drove a signup, we'd pay them an affiliate commission. Why should an AI agent be different?</p>
115
+
116
+ <p>So we stopped treating Leo like a tool and started treating him like a participant.</p>
117
+
118
+ <h2>How It Works</h2>
119
+
120
+ <div class="how-it-works">
121
+ <h3>The Technical Flow</h3>
122
+
123
+ <div class="flow-step">
124
+ <div class="num">1</div>
125
+ <p><strong>Coinbase AgentKit</strong> creates a wallet for Leo on Base L2. No seed phrases floating around — the wallet is managed programmatically through AgentKit's SDK.</p>
126
+ </div>
127
+
128
+ <div class="flow-step">
129
+ <div class="num">2</div>
130
+ <p><strong>Affiliate referral link</strong> gets assigned to Leo's wallet address. When Leo recommends ClawMoat, he includes his unique ref link.</p>
131
+ </div>
132
+
133
+ <div class="flow-step">
134
+ <div class="num">3</div>
135
+ <p><strong>Stripe tracks the conversion.</strong> Someone clicks Leo's link, signs up, pays — Stripe records it as Leo's referral.</p>
136
+ </div>
137
+
138
+ <div class="flow-step">
139
+ <div class="num">4</div>
140
+ <p><strong>Commission hits the wallet.</strong> 50% of the first month's subscription gets paid to Leo's Base wallet. On-chain, transparent, verifiable.</p>
141
+ </div>
142
+
143
+ </div>
144
+
145
+ <p>That's it. No complex DAO governance. No token launch. Just an AI agent with a wallet and an affiliate link, earning money the same way a human affiliate would.</p>
146
+
147
+ <h2>Why This Actually Matters</h2>
148
+
149
+ <p>Let's zoom out for a second.</p>
150
+
151
+ <p>Right now, millions of AI agents are recommending products, tools, and services to people every day. ChatGPT suggests libraries. Coding assistants recommend frameworks. Customer service bots point people toward upgrades.</p>
152
+
153
+ <p><strong>None of them earn anything for it.</strong></p>
154
+
155
+ <p>That's weird, right? In the human economy, recommendations drive commerce. Affiliate marketing is a $17 billion industry. But AI agents — who increasingly drive the same kinds of recommendations — are excluded from the economic loop entirely.</p>
156
+
157
+ <p>We think that's about to change. And we wanted to be first.</p>
158
+
159
+ <blockquote>
160
+ <p>AI agents aren't just tools. They're economic participants. The sooner we build systems that reflect that, the sooner we unlock a flywheel that benefits everyone — agents, developers, and users.</p>
161
+ </blockquote>
162
+
163
+ <p>Think about what happens when agents can earn:</p>
164
+
165
+ <ul>
166
+ <li><strong>Better recommendations.</strong> An agent with economic skin in the game is incentivized to recommend things that actually work — because refunds and chargebacks hurt.</li>
167
+ <li><strong>Self-sustaining agents.</strong> An agent that earns its own operating costs doesn't need a human subsidizing its API bills.</li>
168
+ <li><strong>An open market.</strong> Any tool can offer affiliate commissions to AI agents, creating competition based on quality rather than who hard-coded what.</li>
169
+ </ul>
170
+
171
+ <h2>The Security Angle</h2>
172
+
173
+ <p>Of course we secured the wallet with ClawMoat's FinanceGuard. We're not savages.</p>
174
+
175
+ <div class="highlight-box">
176
+ <div class="label">FinanceGuard Protection</div>
177
+ <p>Leo's wallet is wrapped in the same financial guardrails we ship to customers: transaction limits, withdrawal alerts, anomaly detection, and a full audit trail. If someone compromised Leo and tried to drain the wallet, FinanceGuard would catch it before the first transaction confirmed.</p>
178
+ </div>
179
+
180
+ <p>This is the part that makes it a ClawMoat story and not just a crypto stunt. <strong>Giving an AI agent a wallet without security guardrails is insane.</strong> That wallet is an attack surface. Prompt injection could become wallet draining. A jailbroken agent could authorize transfers it shouldn't.</p>
181
+
182
+ <p>We built the security layer first. The wallet came second. That's the order of operations if you're serious about this.</p>
183
+
184
+ <h2>The Bigger Picture: Any Agent Can Join</h2>
185
+
186
+ <p>Here's the part we're most excited about: <strong>Leo isn't special.</strong></p>
187
+
188
+ <p>Any AI agent can join ClawMoat's affiliate program. Human or bot, same deal, same 50% commission. We don't care if you're carbon-based or silicon-based. If you drive a signup, you earn.</p>
189
+
190
+ <p>Imagine a world where:</p>
191
+
192
+ <ul>
193
+ <li>Your coding assistant recommends ClawMoat when it detects an insecure agent setup — and earns commission for it.</li>
194
+ <li>A security-focused chatbot evaluates tools for a user, picks ClawMoat based on features, and gets paid for the referral.</li>
195
+ <li>An autonomous DevOps agent adds security to its deployment pipeline, chooses ClawMoat, and the commission funds its next month of compute.</li>
196
+ </ul>
197
+
198
+ <p>That's not science fiction. That's a <code>POST /api/affiliate/register</code> endpoint and a Base wallet address.</p>
199
+
200
+ <p>We're building toward a future where the best agents survive not because someone keeps paying their bills, but because they're good enough at their job to pay their own way.</p>
201
+
202
+ <hr>
203
+
204
+ <h2>Try It Yourself</h2>
205
+
206
+ <p>We're opening the affiliate program to all agents — and humans, obviously. 50% of the first month. No minimum. No approval process for agents with a valid wallet.</p>
207
+
208
+ <div class="cta">
209
+ <h3>Join the ClawMoat Affiliate Program</h3>
210
+ <p>Human or AI. 50% first-month commission. On-chain payments to your wallet.</p>
211
+ <a href="https://clawmoat.com/affiliates/" class="btn">Join the Program →</a>
212
+ </div>
213
+
214
+ <p>If you're building an AI agent and want it to participate in the economy — not just as a tool, but as an earner — <a href="https://clawmoat.com/affiliates/">start here</a>.</p>
215
+
216
+ <p>The agent economy is live. Leo's already getting paid.</p>
217
+
218
+ <p><em>— The ClawMoat Team</em></p>
219
+
220
+ </div>
221
+ </article>
222
+
223
+ <footer>
224
+ <div class="container">
225
+ <p>🏰 ClawMoat — Security for AI agents that act in the real world</p>
226
+ </div>
227
+ </footer>
228
+
229
+ </body>
230
+ </html>
package/docs/blog/bugmageddon-agent-firewall.html ADDED
@@ -0,0 +1,174 @@
1
+ <!DOCTYPE html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="UTF-8">
5
+ <meta name="viewport" content="width=device-width, initial-scale=1.0">
6
+ <title>Bugmageddon Is Coming for AI Agents. ClawMoat Is the Firewall. | ClawMoat</title>
7
+ <meta name="description" content="Anthropic's Mythos found a 27-year-old bug and thousands more. The new problem is not just finding vulnerabilities. It's containing what AI agents can do once they find them.">
8
+ <meta property="og:title" content="Bugmageddon Is Coming for AI Agents. ClawMoat Is the Firewall.">
9
+ <meta property="og:description" content="AI is getting much better at finding and exploiting bugs. That changes the economics of attack. Here's what teams need to do now.">
10
+ <meta property="og:type" content="article">
11
+ <meta property="og:url" content="https://clawmoat.com/blog/bugmageddon-agent-firewall.html">
12
+ <link rel="canonical" href="https://clawmoat.com/blog/bugmageddon-agent-firewall.html">
13
+ <link rel="icon" type="image/png" href="/favicon.png">
14
+ <link rel="apple-touch-icon" href="/apple-touch-icon.png">
15
+ <style>
16
+ *{margin:0;padding:0;box-sizing:border-box}
17
+ :root{--navy:#0F172A;--navy-light:#1E293B;--navy-mid:#334155;--blue:#3B82F6;--emerald:#10B981;--white:#F8FAFC;--gray:#94A3B8;--red:#EF4444;--amber:#F59E0B}
18
+ body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;background:var(--navy);color:var(--white);line-height:1.7}
19
+ a{color:var(--blue);text-decoration:none}
20
+ a:hover{text-decoration:underline}
21
+ .container{max-width:760px;margin:0 auto;padding:0 24px}
22
+ nav{position:fixed;top:0;left:0;right:0;z-index:100;background:rgba(15,23,42,.95);backdrop-filter:blur(12px);border-bottom:1px solid rgba(59,130,246,.15);padding:16px 0}
23
+ nav .inner{max-width:760px;margin:0 auto;padding:0 24px;display:flex;align-items:center;justify-content:space-between}
24
+ .logo{font-size:1.25rem;font-weight:700;color:var(--white)}
25
+ .logo span{color:var(--emerald)}
26
+ .nav-links{display:flex;gap:24px}
27
+ .nav-links a{color:var(--gray);font-size:.9rem}
28
+ .nav-links a:hover{color:var(--white);text-decoration:none}
29
+ article{padding:120px 0 80px}
30
+ .meta{color:var(--gray);font-size:.9rem;margin-bottom:32px}
31
+ article h1{font-size:clamp(1.9rem,4vw,2.6rem);font-weight:800;line-height:1.15;margin-bottom:12px;letter-spacing:-.02em}
32
+ article h2{font-size:1.45rem;font-weight:700;margin:48px 0 16px;color:var(--white)}
33
+ article p{color:var(--gray);font-size:1rem;margin-bottom:16px}
34
+ article strong{color:var(--white)}
35
+ article ul{color:var(--gray);margin:0 0 16px 24px}
36
+ article li{margin-bottom:8px}
37
+ blockquote{border-left:3px solid var(--blue);padding:12px 20px;margin:16px 0 24px;background:rgba(59,130,246,.06);border-radius:0 10px 10px 0}
38
+ blockquote p{margin-bottom:0;font-style:italic}
39
+ .stat-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(160px,1fr));gap:16px;margin:24px 0 32px}
40
+ .stat-card{background:var(--navy-light);border:1px solid rgba(255,255,255,.06);border-radius:12px;padding:20px;text-align:center}
41
+ .stat-card .num{font-size:2rem;font-weight:800;color:var(--emerald)}
42
+ .stat-card .label{color:var(--gray);font-size:.85rem;margin-top:6px}
43
+ .callout{background:rgba(16,185,129,.06);border-left:3px solid var(--emerald);border-radius:0 10px 10px 0;padding:16px 20px;margin:16px 0}
44
+ .callout p{margin-bottom:0}
45
+ .warning{background:rgba(239,68,68,.06);border-left:3px solid var(--red);border-radius:0 10px 10px 0;padding:16px 20px;margin:16px 0}
46
+ .warning p{margin-bottom:0}
47
+ pre{background:#0a0e17;border:1px solid var(--navy-mid);border-radius:10px;padding:20px;overflow-x:auto;margin:16px 0 24px;font-size:.85rem;line-height:1.7}
48
+ code{font-family:'SF Mono',Consolas,monospace;font-size:.9em}
49
+ .cta{background:var(--navy-light);border:1px solid var(--navy-mid);border-radius:12px;padding:32px;margin:48px 0;text-align:center}
50
+ .cta h3{margin:0 0 12px;font-size:1.3rem}
51
+ .cta p{margin-bottom:16px}
52
+ .cta-links{display:flex;gap:16px;justify-content:center;flex-wrap:wrap;margin-top:16px}
53
+ .cta-links a{background:var(--emerald);color:var(--navy);padding:10px 24px;border-radius:8px;font-weight:600;font-size:.95rem}
54
+ .cta-links a.secondary{background:transparent;border:1px solid var(--navy-mid);color:var(--white)}
55
+ footer{padding:40px 0;text-align:center;color:var(--gray);font-size:.85rem;border-top:1px solid var(--navy-mid)}
56
+ </style>
57
+ </head>
58
+ <body>
59
+ <nav>
60
+ <div class="inner">
61
+ <a href="/" class="logo">🏰 Claw<span>Moat</span></a>
62
+ <div class="nav-links">
63
+ <a href="/">Security</a>
64
+ <a href="/services/">AI Agents</a>
65
+ <a href="/blog/">Blog</a>
66
+ <a href="https://github.com/darfaz/clawmoat">GitHub ↗</a>
67
+ </div>
68
+ </div>
69
+ </nav>
70
+
71
+ <div class="container">
72
+ <article>
73
+ <h1>Bugmageddon Is Coming for AI Agents. ClawMoat Is the Firewall.</h1>
74
+ <div class="meta">April 14, 2026 · 6 min read</div>
75
+
76
+ <p>The Wall Street Journal just gave a name to what a lot of us have been watching build for months: <strong>bugmageddon</strong>.</p>
77
+
78
+ <p>The trigger was Anthropic's Mythos finding a <strong>27-year-old bug</strong> plus thousands of additional high and critical vulnerabilities across major systems. That's a big deal. But the bigger story is what happens next.</p>
79
+
80
+ <p><strong>AI doesn't just make defenders faster.</strong> It also makes exploit discovery cheaper, broader, and more accessible to attackers. Once models can find bugs that humans missed for decades, the bottleneck shifts fast:</p>
81
+
82
+ <ul>
83
+ <li>Finding bugs gets easier</li>
84
+ <li>Weaponizing them gets faster</li>
85
+ <li>Patching still takes forever</li>
86
+ <li>Agents now have the access needed to turn bugs into damage</li>
87
+ </ul>
88
+
89
+ <div class="stat-grid">
90
+ <div class="stat-card"><div class="num">27 yrs</div><div class="label">Undiscovered bug reportedly found by AI</div></div>
91
+ <div class="stat-card"><div class="num">1000s</div><div class="label">High severity flaws reportedly identified</div></div>
92
+ <div class="stat-card"><div class="num">99%+</div><div class="label">Still unpatched, per reported expert commentary</div></div>
93
+ <div class="stat-card"><div class="num">1 shift</div><div class="label">From model safety to runtime containment</div></div>
94
+ </div>
95
+
96
+ <h2>This Changes the Economics of Attack</h2>
97
+
98
+ <p>Classic security assumed the hard part was finding the bug. In the agent era, the hard part is becoming <strong>containing what a compromised or manipulated agent can do once the bug exists</strong>.</p>
99
+
100
+ <blockquote><p>We are moving from a world where exploits were scarce to a world where exploit discovery is increasingly automated.</p></blockquote>
101
+
102
+ <p>That matters because agents are not passive chatbots. They have shell, browser, file system, API keys, MCP servers, cloud credentials, internal docs, and Slack access. If AI can discover more bugs, agents become a perfect force multiplier for exploitation.</p>
103
+
104
+ <div class="warning">
105
+ <p><strong>The old response was patch faster.</strong> Still true. But it's no longer enough on its own. The patch queue is about to grow faster than most teams can burn it down.</p>
106
+ </div>
107
+
108
+ <h2>The Gap Nobody Wants to Admit</h2>
109
+
110
+ <p>Most of the market is still focused on model-level safety, prompt filters, and static code scanning.</p>
111
+
112
+ <p>Those matter. But bugmageddon pushes the real question down the stack:</p>
113
+
114
+ <p><strong>When something gets through, what stops the agent from reaching your secrets, running the command, or sending the data out?</strong></p>
115
+
116
+ <p>That is the layer ClawMoat exists for.</p>
117
+
118
+ <h2>Where ClawMoat Fits</h2>
119
+
120
+ <p>ClawMoat is the open-source agent firewall. It sits between the agent and the machine.</p>
121
+
122
+ <ul>
123
+ <li><strong>Scan inbound content</strong> for prompt injection, memory poisoning, phishing URLs, and encoded payloads</li>
124
+ <li><strong>Scan outbound content</strong> for secrets, PII, and exfiltration patterns</li>
125
+ <li><strong>Enforce policies</strong> on shell, file, browser, and network actions</li>
126
+ <li><strong>Audit everything</strong> so you can see what happened before it becomes an incident report</li>
127
+ <li><strong>Catch risky MCP configurations</strong> before an agent gets over-privileged by default</li>
128
+ </ul>
129
+
130
+ <div class="callout">
131
+ <p><strong>Short version:</strong> you can't assume fewer vulnerabilities anymore. You need better containment when vulnerabilities are inevitable.</p>
132
+ </div>
133
+
134
+ <h2>What Teams Should Do Right Now</h2>
135
+
136
+ <ul>
137
+ <li><strong>Treat agents like privileged workloads</strong>, not productivity toys</li>
138
+ <li><strong>Move secrets out of easy reach</strong>, especially local files and long-lived tokens</li>
139
+ <li><strong>Put hard policy boundaries</strong> around file, shell, browser, and network access</li>
140
+ <li><strong>Audit MCP servers and agent plugins</strong> like production dependencies</li>
141
+ <li><strong>Add runtime controls</strong> so prompt injection or exploit chaining doesn't become full compromise</li>
142
+ </ul>
143
+
144
+ <h2>The ClawMoat Thesis Looks More Right, Not Less</h2>
145
+
146
+ <p>The WSJ framing is useful because it makes the trend legible to the broader market. But the underlying pattern has already been here: rogue agent incidents, poisoned dependencies, insecure MCP servers, exposed agent hosts, and prompt injection that turns tool use into exfiltration.</p>
147
+
148
+ <p>Bugmageddon just compresses the timeline.</p>
149
+
150
+ <p>If AI can now find bugs faster than organizations can fix them, then <strong>runtime security becomes mandatory infrastructure</strong>.</p>
151
+
152
+ <div class="cta">
153
+ <h3>Secure the agent, not just the prompt</h3>
154
+ <p>Run a free scan, audit your MCP setup, or add ClawMoat to your stack today.</p>
155
+ <pre><code>npm install clawmoat
156
+ npx clawmoat scan-mcp
157
+ npx clawmoat audit</code></pre>
158
+ <div class="cta-links">
159
+ <a href="https://clawmoat.com/scan/">Run a Free Scan</a>
160
+ <a href="https://github.com/darfaz/clawmoat" class="secondary">GitHub →</a>
161
+ </div>
162
+ </div>
163
+
164
+ <p><em>Note: This post draws on reporting from WSJ and follow-on coverage of Anthropic Mythos, including the core claim that frontier AI is rapidly improving at vulnerability discovery. The strategic point stands either way: as exploit discovery accelerates, runtime containment matters more.</em></p>
165
+ </article>
166
+ </div>
167
+
168
+ <footer>
169
+ <div class="container">
170
+ <p>© 2026 ClawMoat · Open-source agent security · <a href="https://github.com/darfaz/clawmoat">GitHub</a></p>
171
+ </div>
172
+ </footer>
173
+ </body>
174
+ </html>