rule bulwark_https_bulwarkblack_com_ai_agent_governance_security_control { meta: author = "Bulwark Black LLC" source = "https://bulwarkblack.com/ai-agent-governance-security-control/" description = "Auto-extracted indicators. Verify before use; not a behavioral detection rule." generated = "2026-07-15T22:30:00Z" tlp = "TLP:CLEAR" indicator_count = "1" strings: $s0 = "claude.ai" ascii wide nocase // Domains condition: any of ($s*) }