SecureClaw: Clawing Back Control of LLM Agents
SecureClaw is a dual-boundary architecture designed to secure tool-using LLM agents against two failures: unauthorized external actions and exposure of sensitive data during runtime. It separates authorization at the effect sink using a PREVIEW->COMMIT protocol and confines raw secrets during reads using an opaque handle layer, ensuring the untrusted runtime cannot directly access or modify external state or plaintext.