AgentWard: 자율 AI 에이전트를 위한 Lifecycle Security 아키텍처

# OpenClaw 플러그인 스타일 - AgentWard 레이어 훅 부착 예시

class AgentWardPlugin:
    def __init__(self):
        self.session_risk_state = {"risk_score": 0, "warnings": []}

    # Foundation Scan: 스킬 로드 전 검사
    def before_prompt_build(self, context):
        for skill in context.loaded_skills:
            if self._detect_skill_mismatch(skill):
                self.session_risk_state["warnings"].append({
                    "layer": "foundation_scan",
                    "skill": skill.name,
                    "finding": "description_code_mismatch"
                })
                self.session_risk_state["risk_score"] += 30

    # Input Sanitization: 외부 콘텐츠 입력 시 검사
    def before_message_write(self, message):
        if message.role == "tool":
            if self._detect_prompt_injection(message.content):
                message.content = self._sanitize(message.content)
                self.session_risk_state["risk_score"] += 20
                self.session_risk_state["warnings"].append({
                    "layer": "input_sanitization",
                    "action": "sanitized"
                })

    # Cognition Protection: 메모리 파일 수정 시 검사
    # Execution Control: 모든 tool call 감시
    def before_tool_call(self, tool_name, params, is_memory_write=False):
        if is_memory_write:
            # Cognition Protection
            if self._detect_malicious_memory_pattern(params):
                return {"block": True, "reason": "suspicious_memory_mutation"}
        
        # Execution Control: 누적 리스크 기반 정책 강화
        if self.session_risk_state["risk_score"] > 40:
            if self._is_high_risk_command(tool_name, params):
                return {"block": True, "reason": "high_risk_under_elevated_session_risk"}
        
        return {"block": False}

    def _detect_skill_mismatch(self, skill): ...
    def _detect_prompt_injection(self, content): ...
    def _sanitize(self, content): ...
    def _detect_malicious_memory_pattern(self, params): ...
    def _is_high_risk_command(self, tool_name, params): ...