Live data from Hacker News

Run NanoClaw in Docker Sandboxes

nanoclaw.dev

61–64 of 64 posts

Re: Run NanoClaw in Docker Sandboxes

#61
post #11

They may seem like small details, but I think a couple novel design decisions are going to prove to be widely adopted and revolutionary. The biggest one (as Karpathy notes) is having skills for how to write a (slack, discord, etc) integration, instead of shipping an implementation for each. Call it “Claude native development” if you will, but “fork and customize” instead of batteries-included platforms/frameworks is…

> having skills for how to write a (slack, discord, etc) integration, instead of shipping an implementation for each I'm not sure what is the advantage. Each user will have to waste time and tokens for the same task, instead of doing it once and and shipping to everyone.

Here is my take -

Old world - each platform writes APIs and then has to publish rich client libraries. Despite the server APIs theoretically being well documented, because users want the quickest time-to-first-demo platforms also ship a bunch of client code. This may bring in dependencies you don’t care for, or otherwise have a wide attack surface.

New world - platforms publish good REST APIs and specs, and Claude can trivially implement the client that is idiomatic for your own app deployment. Within Nanoclaw you don’t even need to handle eg streaming APIs if you only need a simple poll on one endpoint, even though the server (and official client library) might support them. In the best case, this can keep your app more secure.

Of course, the tradeoff/risk is that an individual implementation might be broken. So right now I’m not convinced it’s a win. But I generally buy that it’ll be possible to maintain a high enough security bar within the next year or two.

The time and token cost is probably seconds and cents already, I don’t buy that one.

Re: Run NanoClaw in Docker Sandboxes

#62
post #46
post #21

I love how NanoClaw looks, but I simply can't bring myself to give Israeli software like this access to any of my systems.

Israeli? What do you mean? Where did you find that NanoClaw is israeli?

Gavriel Cohen, its creator, is one of the many human shields for the IDF^H^H^H^H^H^H^H^H^H^H^H^H^H people cowering in bomb shelters in Tel Aviv.

Re: Run NanoClaw in Docker Sandboxes

#63
post #62
post #46

Earlier quoted context omitted.

Israeli? What do you mean? Where did you find that NanoClaw is israeli?

Gavriel Cohen, its creator, is one of the many human shields for the IDF^H^H^H^H^H^H^H^H^H^H^H^H^H people cowering in bomb shelters in Tel Aviv.

that sucks, i think of all the AI bots this one is the most promising

Re: Run NanoClaw in Docker Sandboxes

#64
post #5

You must explicitly state what your threat model is when writing about security tooling, isolation, and sandboxing. This threat model is concerned with running arbitrary code generated by or fetched by an AI agent on host machines which contain secrets, sensitive files, and/or exfoliate data, apps, and systems which should not be lost. What about the threat model where an agent deletes your entire inbox? Or sends you…

We've been working on that with tenuo: https://github.com/tenuo-ai/tenuo

Task-scoped "warrants", attenuating with delegation, and enforced cryptographically at tool call.

Macaroons/Biscuits for agents basically.

Post reply on HN