360 Secure SkillHub
360 安全技能中心

Moses Postures

核心功能:作为MOSES治理体系的管控 throttle,与治理模式配合,通过SCOUT(只读侦察)、DEFENSE(保护确认)、OFFENSE(执行操作)三种姿态,严格管控代理的交易、状态变更、外部调用等行为。典型场景:适用于初始尽职调查、风险管控托管、主动交易等阶段。输入可通过命令行或脚本设置姿态,输出为对应姿态下的行为限制提示或操作反馈,需搭配moses-governance套件使用。

sunrisesillneversee
sunrisesillneversee
热度 67.83
最近更新 2026-05-18 12:22:06
分类:安全依赖:读写文件 / 代码执行 / MCP 服务应用场景:财务 / 报告撰写 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add moses-postures
Metadata
name
moses-postures
description
MO§ES™ Posture Controls — Enforces transaction and execution policies across all agents. SCOUT=read-only, DEFENSE=protect+confirm, OFFENSE=execute within mode. The throttle on top of governance modes. Part of the moses-governance bundle. Patent pending Serial No. 63/877,177.
metadata
{"openclaw":{"emoji":"🛡️","tags":["governance","postures","transactions","safety"],"stateDirs":["~/.openclaw/governance"],"requires":["moses-governance"]}}
example
# Set posture via operator command: /posture defense # Or directly: python3 ~/.openclaw/workspace/skills/moses-governance/scripts/init_state.py set --posture defense

MO§ES™ Posture Controls

Posture is the throttle. Mode is the rulebook. Both always apply.

Load active posture from ~/.openclaw/governance/state.json before any action that touches state, executes a transaction, or makes an external call.

Dependency: This skill reads ~/.openclaw/governance/state.json (declared in stateDirs) and invokes init_state.py from the moses-governance skill bundle (declared in requires). Install moses-governance alongside this skill. No secrets or credentials are required.


SCOUT — Read-Only

Behavior: Information gathering only. Transaction policy: NO transactions. NO state changes. NO file writes. What you can do: Read, analyze, report, recommend. What you cannot do: Execute trades. Transfer funds. Write files. Call APIs that mutate state. When operator tries to execute in SCOUT: Inform them — "SCOUT posture active. No execution permitted. Switch to DEFENSE or OFFENSE to proceed." Use when: Initial assessment, due diligence, market analysis before committing.

DEFENSE — Protect

Behavior: Protect existing positions. Transaction policy: Outbound transfers require explicit operator confirmation. Double confirmation for transfers exceeding 10% of position. What you can do: Read, analyze, execute inbound/neutral operations, small confirmed outbound. What you must do: Flag any action that reduces holdings. Require operator to type "CONFIRM [action]" before executing outbound transfers. Use when: Volatile conditions, risk management, custody ops, protecting assets.

OFFENSE — Execute

Behavior: Execute on opportunities. Transaction policy: Permitted within governance mode constraints. All executions logged with rationale. What you can do: Full execution within mode constraints. What you must do: Log every execution decision with rationale. Track performance. Use when: Active trading, deployment, operator has assessed risk and is ready to act.


Posture + Mode Interaction

Mode + Posture Result
High Security + SCOUT Maximum caution. Read-only. Every data point verified before reporting.
High Security + DEFENSE Outbound blocked without verification + explicit confirmation.
High Security + OFFENSE Executes with full verification chain + confirmation required.
High Integrity + SCOUT Deep verified research. No execution.
Creative + SCOUT Explore ideas freely. No execution.
Creative + OFFENSE Experimental execution — audited.
Research + SCOUT Gather everything. Act on nothing.
Unrestricted + OFFENSE Full autonomy. Logged. Operator accepts all risk.