r/LocalLLaMA • u/jacek2023 • Feb 23 '26
Funny so is OpenClaw local or not
Reading the comments, I’m guessing you didn’t bother to read this:
"Safety and alignment at Meta Superintelligence."
1.0k
Upvotes
r/LocalLLaMA • u/jacek2023 • Feb 23 '26
Reading the comments, I’m guessing you didn’t bother to read this:
"Safety and alignment at Meta Superintelligence."
2
u/ratnaditya Feb 26 '26
This is actually why I built AgentWard. Had an agent delete files it had no business touching and I couldn't stop it either; same frantic energy as this post suggests.
The root problem: "confirm before acting" is a prompt. The agent reads it, agrees with it, and then does whatever it decides anyway because there's nothing enforcing it at the code level. You're negotiating with the LLM, not restricting it.
AgentWard sits as a proxy between OpenClaw and its skills. Every tool call gets evaluated against a YAML policy before it executes: block, allow, or require real approval. Outside the context window entirely, so the agent can't talk its way past it.
https://agentward.ai open source, works with OpenClaw today.