Why three? MAESTRO tells us where to look (architectural layers). ASI tells us what to look for (attack patterns). ATLAS tells us how adversaries actually exploit these (real-world TTPs). Together they produce threat intelligence that no single framework achieves alone.
Layer 3 (Agent Framework) shows the highest threat density - 5 of 10 threats manifest here. This reflects OpenClaw's architecture where the AgentSession runtime handles context assembly, tool dispatch, and inter-agent routing.
Most frequently observed: LLM Prompt Injection (T0051) and AI Agent Tool Invocation (T0033) appear in all 4 case studies. Modify AI Agent Configuration (T0081) and Escape to Host (T0155) are flagged as "Still Under Investigation" by MITRE.
This research aligns with established frameworks released by leading standards bodies. Phase I.5 adds MITRE ATLAS as the third framework based on their Feb 2026 OpenClaw investigation.