Birbla

Join the discussion

Write your take first — we'll ask for email only when you're ready to publish.

Sign in
  • Hacker News
  • Not sure why I would put another software to check that the agent doesn't do "SQL writes", rather than providing them... with a read-only account?

    It looks like those projects are trying to reinvent service-accounts and permissions... Just define the permissions for each of your APIs, and provide only endpoints to these (through MCP or whatever) to your agents...

    by oulipo2
  • The product looks great and I'm really interested in trying it out. Very cool, congrats on shipping! Also...as a parent of young kids: this name made me laugh out loud. The OG image on the marketing site is a fun easter egg.

    For those here without young kids in their life: https://en.wikipedia.org/wiki/Paw_Patrol

    by mmcclure
  • This is very interesting. I build something like this but native to claude code and something that focus on just logging the violation. My question is if you are terminating a process with in the workflow will that about all other things that executed before. anyway would love your feed back on this https://github.com/varmabudharaju/agent-pd
    by varmabudharaju
  • Nice library and fast Go code, which is nice to know. I'm solving the similar problem, but on different level. The agentic runtime (Go too) I'm developing, applying safety guards on different layers, including redaction and compression plugins. Do you only block the agentic request or you can redact it in the middle? How do you solve LLM caching problems? What your agent see when it's request is blocked? Does it try to reformulate the request or just stops?
    by denn-gubsky
  • Nice work shipping this.

    Disclosure: author of a related tool here. I have create agent-vault-proxy for a very similar reason. It also can help keep credentials out of the agent process. The agent gets a placeholder, the proxy swaps in the real secret in transit.

    I read them as complementary: action firewall in front, credential broker behind. https://github.com/inflightsec/agent-vault-proxy

    by radku
  • This is a really cool library to look at even if you aren't running openclaw directly.

    Lots of good concepts to seek inspiration from.

    1. process-scoped egress policy

    2. policy-as-code

    3. explicit approval classes

    4. normalized network/ guardrail receipts.

    5. structured guardrail outcomes

    6. centralized decision rules

    by Apylon777
  • I think this sounds very cool! It sounds similar to Agent Vault (github.com/Infisical/agent-vault) but with an added feature of having security policies for denial/human-in-the-loop of traffic based on the contents of requests?

    The nice thing about Agent Vault is the encryption of credentials and other ways they handle making sure those don't leak from storage. I suppose you could potentially wrap the two in layers as well (agent -> Claw Patrol -> Agent Vault -> external network)

    EDIT: looking at some of the comments, it sounds like Claw Patrol can work with protocols beyond HTTP/S, so potentially covers more surface area than AV

    by jameslk
  • Great name by the way, as someone who's been forced to watch the show by cousins.
    by satvikpendem

Explore Birbla archives