Gate AI agent actions behind approvals
An agent proposes an action. A policy service and a person decide it. A sealed executor holds the only credentials. The design that survives prompt injection.
Filtering by topic #architecture · clear
An agent proposes an action. A policy service and a person decide it. A sealed executor holds the only credentials. The design that survives prompt injection.
Which message queue belongs on a single server: delivery guarantees, memory and disk cost, restart behaviour, backlog checks, and when Postgres wins.
OpenClaw is a personal AI agent that runs commands on your own server. Here is how one is built, piece by piece, and why hardening comes first.