Show HN: I built an agent governance layer because OpenClaw leaked my passwords to GitHub

Описание и применение

Автор создал систему управления агентами MAREF после утечки данных OpenClaw, обеспечив полный охват OWASP Agentic Top 10 и безопасную работу 139 агентов.

Задача

Agent frameworks lack robust governance, leading to accidental data leaks and security incidents.

Результат

MAREF provides comprehensive governance, achieving 10/10 OWASP coverage and enabling safe operation of 139 agents with minimal overhead.

Рабочий процесс

• Deploy OpenClaw and connect personal vaults
• Detect accidental push of sensitive data to GitHub
• Audit major agent frameworks for governance coverage
• Identify gaps in OWASP Agentic Top 10
• Design MAREF with five governance layers
• Implement constitutional rules, TLA+ state machine, circuit breaker, cryptographic audit trail, and recursive self‑evolution
• Deploy MAREF as a sidecar to existing agents
• Run 139 agents, monitor for zombies
• Iterate on governance layers to improve reliability

Доказательства

OpenClaw had auto‑committed a sync titled "auto‑update knowledge base."

Источник

LangGraph, CrewAI, AutoGen have 0/10 OWASP Agentic Top 10 coverage.

Источник

MAREF covers all 10 OWASP Agentic Top 10 risks.

Источник