Show HN: Claw Patrol, a security firewall for agents

A new AI safety gate drops, and the crowd instantly asks: cool tool or risky babysitter

TLDR: Claw Patrol is a new tool that stands between AI assistants and important company systems, blocking risky actions or asking a human first. Commenters loved the concept but quickly zeroed in on one big concern: if it starts by allowing everything, is this safety tool safe enough out of the box?

A new project called Claw Patrol just strutted onto Hacker News promising to be the bouncer between AI agents and your real systems. In plain English: if an automated assistant tries to do something sketchy — like delete data, poke at secrets, or make dangerous changes — this tool can block it or force a human to approve it first. That alone was enough to get the comments buzzing, but the real show started when readers began poking at the fine print.

The biggest eyebrow-raiser? It appears to start out in “allow everything” mode unless you write your own rules. That immediately triggered the classic internet reaction: “Very neat… but wait, is this safe by default?” One commenter flat-out asked if a default ruleset is coming, which feels like the polite version of yelling, “So the guard dog ships with no teeth?” Others were far more impressed, calling the project a treasure chest of smart ideas even if you never use the product itself, praising features like process-level controls, approval flows, and centralized rule-making.

Then came the practical crowd, who showed up with the unglamorous but very real questions: How does this work across different systems? How do shared logins and credentials get handled for multiple users? What happens if the tool kills a task halfway through after other actions already happened? That’s where the drama lives: everyone loves the idea of an AI leash, but the comments make it clear people want receipts, edge cases, and proof it won’t create a whole new mess. No memes dominated this thread, but the vibe was pure Hacker News: half “this is brilliant,” half “please explain every disaster scenario before I trust it near production.”

Key Points

  • Claw Patrol is described as a firewall for agents that inspects wire-level traffic and enforces HCL-defined rules before actions reach production systems.
  • The article provides a sample rule that denies Kubernetes secret access by matching extracted protocol facts.
  • Policy conditions use CEL expressions over facts extracted from Postgres, ClickHouse, Kubernetes, and HTTP traffic.
  • The tool supports three deployment modes: running a gateway, joining a gateway for host-wide routing, and wrapping a single agent process tree.
  • Installation is available through a shell script or from source with Go and Node.js, and the project is released under the MIT license.

Hottest takes

"default-allow and ships with no rules?" — pavelpilyak
"a really cool library to look at even if you aren’t running openclaw directly" — Apylon777
"if you are terminating a process... what about all other things that executed before" — varmabudharaju
Made with <3 by @siedrix and @shesho from CDMX. Powered by Forge&Hive.