ClawMMU: Protection-Coherent Virtual Memory for Stateful LLM Agents

Summary

ClawMMU is a protection layer for stateful LLM agents that labels every memory item with its owner, scope, origins and authority. It checks these labels whenever content enters the model's context, is written to or read from storage, or drives a tool call. The checks depend on where content came from rather than what it says, so the harness can stop memory-based attacks even when the model is fooled.

Related items

• HighCVE-2026-114107: HKUDS Vibe-Trading indirect prompt injection enabling shell command executionSimilar attack · NVD/CVE Database
• InfoBuilding Trust into Enterprise AI Agents: Cisco AI Defense and Workday Agent PassportSimilar attack · Cisco AI Blog
• InfoAfter the Attacker Leaves: Benchmarking Carryover Attacks on LLM AgentsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoMAS-Guard: Unified Guardrails from Individual Agents to Multi-Agent LLM SystemsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoContext-Aware Prompt Injection Detection via Small Language Models in RAG Pipelines: nokast-secureRAGSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)