Securing Autonomous AI Agents with ClawSentry

# Illustrative sketch (not from the paper)
import asyncio, collections

class ClawSentry:
    def __init__(self): self.blocked=collections.defaultdict(set)
    def fspr(self,pkg): return pkg.get("evidence",0)>=1
    def l1(self,r): return "Block" if r.get("unsafe") else "Defer"
    def l2(self,r): return "Block" if "malicious" in r.get("intent","") else "Defer"
    def l3(self,r): return "Allow"
    def decide(self,r):
        for tier in (self.l1,self.l2,self.l3):
            d=tier(r);
            if d!="Defer": return d
        return "Allow"
    def anti_bypass(self,sid,eff):
        if eff in self.blocked[sid]: return "Block"
        self.blocked[sid].add(eff); return "Proceed"
    async def post_audit(self,out): return "Flag" if "dangerous" in out else "OK"

async def process(sid,pkg,req,out):
    cs=ClawSentry()
    if not cs.fspr(pkg): return "Block(FSPR)"
    if cs.decide(req)=="Block": return "Block(Engine)"
    if cs.anti_bypass(sid,req.get("effect"))=="Block": return "Block(Bypass)"
    audit=await cs.post_audit(out)
    return f"Done,audit={audit}"

# asyncio.run(process(...))  # usage placeholder

// Illustrative sketch (not from the paper)
const {Map,Set}=global;
class ClawSentry{
  constructor(){this.blocked=new Map();}
  fspr(p){return(p.evidence||0)>=1;}
  l1(r){return r.unsafe?'Block':'Defer';}
  l2(r){return (r.intent||'').includes('malicious')?'Block':'Defer';}
  l3(){return'Allow';}
  decide(r){for(const t of [this.l1,this.l2,this.l3]){const d=t.call(this,r);if(d!=='Defer')return d;}return'Allow';}
  antiBypass(s,e){let set=this.blocked.get(s)||new Set();if(set.has(e))return'Block';set.add(e);this.blocked.set(s,set);return'Proceed';}
  async postAudit(o){return o.includes('dangerous')?'Flag':'OK';}
}
async function process(s,pkg,r,out){
  const cs=new ClawSentry();
  if(!cs.fspr(pkg))return'Block(FSPR)';
  if(cs.decide(r)==='Block')return'Block(Engine)';
  if(cs.antiBypass(s,r.effect)==='Block')return'Block(Bypass)';
  const a=await cs.postAudit(out);
  return`Done,audit=${a}`;
}
// process(...).then(console.log);