guards-and-wards

name	guards-and-wards
description	In D&D, Guards and Wards fills an area with layered minor defenses — fog, locked doors, illusory walls, confusion effects — that individually are trivial but collectively make navigation exhausting. The real-world version is defense in depth through volume: honeypots mixed with real services, rotating credentials alongside decoy credentials, overlapping rate limiters and CAPTCHAs and behavioral analysis and IP reputation checks. No single ward stops a determined attacker. The maze does.
user-invocable	true

Guards and Wards

Layer many small defenses into a maze that exhausts intruders before they reach anything valuable.

Overview

Guards and Wards is interpreted here as a hybrid spell with a prototype execution model.

Canonical source: Guards and Wards (spell)

Provider target: OpenClaw

When To Use

• You are deploying, inheriting, or auditing a system and need a full security review.
• Multiple attack surfaces — secrets, permissions, dependencies, network exposure — need to be assessed together.
• A single Glyph of Warding is not enough; you need layered, system-wide defenses.

Workflow

1. Inventory all surfaces: permissions, secrets management, dependency versions, network exposure, authentication, and access controls.
2. Assess each surface for vulnerabilities, misconfigurations, and unnecessary exposure.
3. Prioritize fixes by severity and exploitability, starting with the most dangerous gaps.
4. Apply hardening measures and return a report of what was secured, what remains exposed, and what needs ongoing monitoring.

Deliverables

• A security audit report covering all assessed surfaces.