Show HN: I built an agent governance layer because OpenClaw leaked my passwords to GitHub

说明与用途

作者在OpenClaw泄露数据后构建了MAREF，实现了完整的OWASP Agentic Top 10覆盖，并安全运行139个代理。

问题

Agent frameworks lack robust governance, leading to accidental data leaks and security incidents.

结果

MAREF provides comprehensive governance, achieving 10/10 OWASP coverage and enabling safe operation of 139 agents with minimal overhead.

工作流

• Deploy OpenClaw and connect personal vaults
• Detect accidental push of sensitive data to GitHub
• Audit major agent frameworks for governance coverage
• Identify gaps in OWASP Agentic Top 10
• Design MAREF with five governance layers
• Implement constitutional rules, TLA+ state machine, circuit breaker, cryptographic audit trail, and recursive self‑evolution
• Deploy MAREF as a sidecar to existing agents
• Run 139 agents, monitor for zombies
• Iterate on governance layers to improve reliability

证据

OpenClaw had auto‑committed a sync titled "auto‑update knowledge base."

来源

LangGraph, CrewAI, AutoGen have 0/10 OWASP Agentic Top 10 coverage.

来源

MAREF covers all 10 OWASP Agentic Top 10 risks.

来源