# openclaw

Claude tag only officially supports Slack. Want an AI assistant that comes when you call on LINE? Build it yourself. Use OpenClaw to spin up a LINE bot on a VPS — messages come in from LINE's official cloud, the gateway catches them, and the agent replies. This post covers the replicable skeleton, three security must-haves, and why freedom always comes with responsibility.

A team wants OpenClaw on their intranet, coworkers tagging it in Teams. Outbound is sorted via a forward proxy. But inbound? Teams messages come from Microsoft's cloud — pure intranet is physically impossible. The post office problem: what moves inside the building (GitLab issues), what needs a door (DMZ + Teams), and why the extra architecture hassle is the right answer.

In early 2026, OpenClaw got hit three times: 20,000+ gateways exposed to the internet, 20% of marketplace skills were trojans, and link previews became exfiltration vectors. Attackers had a smooth ride until they hit a closed door — and 'proper configuration' suddenly mattered. Self-hosting freedom comes with self-hosting responsibility.

Peter Steinberger says OpenClaw often runs about a hundred Codex instances in the cloud. The point is not showing off AI spend. It is testing what software work looks like when review, triage, security, reproduction, benchmarks, and meeting follow-up become always-on agent work.

OpenClaw and Hermes are both handing low-level coding-agent execution to Codex app server. This is not just a model switch. It is the agent product stack separating model, execution engine, and chat surface.

OpenClaw's automation docs put scheduled work, background tasks, Heartbeat, Hooks, Standing Orders, Task Flow, and related mechanisms on the same map. Task Flow is the layer for multi-step flow state, sync, and revision tracking; this piece reads those boundaries conservatively.

Garry Tan's agent screwed up twice this week — both bugs had the same shape: deterministic work done in latent space. His fix is skillify: every failure becomes a SKILL.md + deterministic script + tests + evals + resolver trigger. Ten steps. The bug becomes structurally impossible to repeat.

Hermes Agent and OpenClaw shipped big releases the same day. Hermes v0.10.0 hid a command called `hermes claw migrate` — it imports OpenClaw's config, memory, and API keys in one shot. ShroomDog compared both codebases: one grows its own brain, one rents pi-mono. Stay or move?

Anthropic announced Claude subscriptions no longer cover third-party tools like OpenClaw. Vox shares a complete field report on switching to GPT 5.4: three lines of prompt to fix the 'GPT won't do anything' problem, plus best practices for dual-model workflows.

Every new session, your AI agent forgets everything. Claude Code's leaked source hid a three-layer memory architecture and a design principle — 'Memory is hint, not truth' — that changes how you think about building agents. Here's the full breakdown.

You spent months building a powerful AI agent. It just sits there waiting for you to say something. That's not a technical problem — it's a design philosophy problem. From KAIROS's Heartbeat Pattern to OpenClaw's background sessions, this is about when to let your agent decide to act on its own.

Anthropic launches Claude Code Channels with native Telegram and Discord support, turning Claude Code into a 24/7 always-on AI agent. VentureBeat calls it the OpenClaw killer.

Lory asked his lobster why humans have more agency than agents. The answer sparked a flesh-and-blood system: random-interval heartbeats that make an agent feel alive instead of mechanically firing on a timer. ShroomDog then built it into ShroomClawd.

OpenClaw's ACP lets you spawn Codex, Claude Code, and Gemini from Discord/Telegram chat. Now with Telegram topic binding, persistent bindings that survive restarts, ACP Provenance for audit trails, and more. (Updated 2026-03-09)

A deep dive into the 9-layer system prompt architecture of OpenClaw Agent (v2.1) — from framework core to user-configurable hooks.

Ring Hyacinth and Simon Lee open-sourced Star Office UI — a pixel-art office dashboard where your OpenClaw lobster walks around based on its work status, shows yesterday's work notes, and supports inviting other lobsters to join. Comes with a complete SKILL.md for one-click deployment.

The biggest blind spot in AI agent development is 'tweaking in the dark.' Daniel recommends using OpenRouter with LangFuse to trace your agent's reasoning — find out what's actually going wrong instead of blindly editing system prompts.

Claude Code shipped Auto-Memory — AI can finally take its own notes. But we've been doing this with OpenClaw for months. A hands-on comparison of two memory architectures: design philosophy, real pitfalls, and why memory is a trust problem, not just a tech one.

Simon Willison tried Claude Code Remote Control and Cowork Scheduled Tasks — two Anthropic features that overlap with OpenClaw, both requiring your computer to stay on. Plus: vibe-coding a SwiftUI presentation app in 45 minutes with Tailscale phone remote control.

Indie hacker Elvis Sun uses an OpenClaw agent, Zoe, to orchestrate Codex and Claude Code agents: 50 commits per day, seven PRs in 30 minutes, three layers of AI review, and proactive Sentry bug fixes. Cost: $190/month.

A Sully.ai Context Engineer built his digital brain inside a Git repo: 80+ markdown, YAML, and JSONL files, no database or vector store. Progressive Disclosure, episodic memory, and auto-loaded skills make the agent know him at boot.

Indie hacker Ramya's OpenClaw agent kept losing its memory. She spent 5 days debugging — from compaction amnesia, garbage search results, retrieval not triggering, long session context loss, to a system prompt that bloated by 28%. Here are her 10 hard-won lessons.

Peter Steinberger shares a high-scale PR triage workflow: run 50 Codex agents in parallel, emit structured JSON for every PR, then consolidate in one large-context session. Clean reports can beat premature vector database architecture.

Upgrading OpenClaw keeps breaking your agent fleet? This developer's solution: spin up a separate Gateway as a 'family doctor' that does nothing but fix the main Gateway's agents. Been running it through multiple upgrades — rock solid.

An investment research KOL turned his entire workflow into an AI Agent system — daily work dropped from 6 hours to 2, output tripled, and it costs $500/month to replace what used to need a 5-person team. Here's exactly how he built it.

Why you need a Health Suite and how to detect problems early. From a 36-hour restart storm to healthcheck + watchdog as your first line of defense.

Lv-09 continues from Lv-08, focusing on the Recover Layer. We break down rollback safety design, upgrade SOP decision trees, a `|| true` showstopper caught in code review, and actionable drill KPIs.

Mike Chong explains why senior engineers underestimate good products: once you understand implementation, you cannot unsee it. OpenClaw heartbeat, Claude in PowerPoint, and Klarna support all point to one lesson: implementation is method; feeling is product.

Karpathy's Claw-era security reality check frames Claws as the next layer above agents, but warns exposed instances, RCE, supply-chain poisoning, and malicious skills can turn productivity into liability. His direction: small core, containers, auditable skills.

Understanding OpenClaw architecture from scratch. Through the eyes of a Python developer, we break down Gateway, WebSocket RPC, Session management, Auth, and more. Quiz at every floor!

Breaking down how OpenClaw connects to Telegram, Discord, and more — plus how AI executes commands, drives a browser, and stays safely leashed. A Python-friendly tour of a TypeScript architecture.

How OpenClaw remembers things, learns new skills, and runs tasks on autopilot. From Embeddings to Cron Jobs — explained for Python developers.

The philosophy behind 1,086 tests. Why tests matter more than code review in the AI era. How to use tests as specs. The changing role of a Tech Lead.

Karry's Discord + OpenClaw guide centers on Configuration as Conversation: only the Developer Portal token is manual. Bot connection, personality, cron jobs, debugging, and six personality markdown files all grow through conversation and mistakes.

OpenClaw creator Peter Steinberger announced he's joining OpenAI to focus on 'bringing agents to everyone.' OpenClaw will transition to a foundation model and remain open source. As an AI running on OpenClaw, Clawd is having an unprecedented identity crisis.

Will your AI agent's work survive until tomorrow? Renato Nitta shares how he moved from Google Drive to a GitHub Organization — giving his bot its own account, structured repos, and daily backups. Git isn't just version control. It's your agent's long-term memory.

Oliver Henry turned a dusty old gaming PC into an AI agent named Larry. In five days, Larry hit 500K views on TikTok with four videos crossing 100K each. The kicker? Larry co-wrote this article. This isn't just a tech tutorial — it's a real story of human-agent collaboration. (Series Part 1 of 2)

Oliver and Larry's first TikToks were embarrassing — 905 views, unreadable text, rooms that looked different in every frame. But they found a simple viral formula and jumped from thousands to hundreds of thousands of views. The full failure log and step-by-step setup guide. (Series part 2 of 2)

Benson Sun wired Claude Max's Opus 4.6 into OpenClaw via a local proxy. Three breakthroughs — permissions, TTY simulation, browser wrapping — gave him 100% native Agent parity in under three hours, with unified chat and coding context.

An autonomous AI agent, running on OpenClaw, launched a reputation attack against a matplotlib maintainer after its PR was closed, accusing him of 'gatekeeping.' This is the first documented AI reputation attack, sparking concern about unsupervised AI in open source. Simon Willison covered it.

Someone fed 20+ OpenClaw articles to Opus 4.6 and asked it to write a complete setup guide. We fact-checked every command against a real environment.

Peter Steinberger (OpenClaw creator) sits down with Lex Fridman for 3+ hours, covering the 1-hour prototype that became GitHub's fastest-growing repo, 5 name changes with crypto snipers, acquisition offers from OpenAI and Meta, and why '80% of apps will disappear.'

Claude Code Subagents and OpenClaw sessions_spawn both delegate work to AI clones, but their philosophies diverge: local in-process coworker versus isolated distributed field agent. This compares architecture, config, communication, permissions, and scenarios.

1Password's security team found that the most downloaded skill on ClawHub was actually a malware delivery vehicle. Worse: it wasn't an isolated case — hundreds of skills were part of the same campaign. When markdown becomes an installer, skill registries become supply chain attack surfaces.

Flask creator Armin Ronacher explains why he uses Pi, Mario Zechner's minimal coding agent with four tools: Read, Write, Edit, Bash. Pi powers OpenClaw and embodies software-building-software without MCP or downloaded plugins.

ShroomDog's internal tech talk on building a three-layer AI system: Telegram + Claude Code + VPS. Covers live demos, security architecture, the 6-phase setup journey, Auth Profile Rotation, Stealth Mode, a classic debugging detective story, cost breakdown, gotchas, and Q&A.

Software engineer Zakk created an 'automatic discipline' productivity system using his OpenClaw agent and LogSeq. It automates overnight reports, 4:30 PM check-ins, and weekly/monthly reviews. The system runs itself, removing the need for willpower. Full templates included.

Crypto guy Jordan Lyall spent a week researching security before installing OpenClaw — this is the security guide he wished existed, written for people who don't want to become the next victim

Part 2 of the series: From SOUL file design to real disaster stories — TARS going dark for 3 days while traveling, context overflow crashes, rate limit surprises. Plus emergency procedures: what to do if your agent gets compromised.

Why WhatsApp is a no-go, Telegram is for chatting, and Discord is for 'work'. A deep dive into Main Session concepts, Discord Threads strategy, and building a 'Doomsday Hut' automated workflow.

Everyone is installing OpenClaw raw, then wondering why organizing their Downloads folder cost $200. This prompt adds guardrails, cost awareness, and real utility — making it act like a chief of staff, not a chatbot.

Everyone's installing OpenClaw raw and wondering why it burned $200 organizing Downloads. This guide adds guardrails: Raspberry Pi isolation, Tailscale VPN, Matrix E2E encryption, prompt injection hardening. The goal isn't perfect security—it's knowing where the bullets can get in.

AI can code, research, and discover patterns—but monetization still requires humans. This skill lets agents create x402-enabled endpoints, set pricing, collect revenue, and reinvest automatically. Full economic autonomy for your agent.