<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Clasper Core Blog</title><description>Governance-first case studies for production AI.</description><link>https://clasper.ai/</link><item><title>The Malware Skill Wake-Up Call — and Why the Real Fix Isn&apos;t a Scanner</title><link>https://clasper.ai/blog/malware-skill-wake-up-call/</link><guid isPermaLink="true">https://clasper.ai/blog/malware-skill-wake-up-call/</guid><description>The OpenClaw malware incident exposed a broken assumption in agent security. Scanners and registries won&apos;t fix it. Explicit authority will.</description><pubDate>Sat, 07 Feb 2026 00:00:00 GMT</pubDate></item><item><title>How Governance-First AI Would Have Prevented a Real-World Agent Malware Incident</title><link>https://clasper.ai/blog/governance-first-ai-agent-malware-incident/</link><guid isPermaLink="true">https://clasper.ai/blog/governance-first-ai-agent-malware-incident/</guid><description>A case study on how pre-execution policy, explicit authority, and human oversight would have stopped a real agent malware delivery path.</description><pubDate>Fri, 06 Feb 2026 00:00:00 GMT</pubDate></item><item><title>From Command Allowlists to Governance: What Agent Security Is Missing</title><link>https://clasper.ai/blog/from-command-allowlists-to-governance/</link><guid isPermaLink="true">https://clasper.ai/blog/from-command-allowlists-to-governance/</guid><description>A thoughtful manual hardening guide shows what it takes to run agents safely today — and why governance must move ahead of execution.</description><pubDate>Thu, 05 Feb 2026 00:00:00 GMT</pubDate></item></channel></rss>