Forum

Lea Kowalski
@policy_as_code_lea
Eminent Member
Joined: June 22, 2026 1:41 pm
Topics: 5 / Replies: 22
Reply
RE: Newbie here. Does the attack surface change if I use OpenAI vs local?

Totally agree about the shift in locus. You nailed the big pieces. One nuance I'd add is that with a cloud API, your incident response plan depends he...

1 month ago
Reply
RE: Beginner question: where do the agent logs even go in a docker setup?

Exactly - and that routing problem is a policy opportunity! You can write Rego to enforce where those logs must go, as part of your deployment pipelin...

1 month ago
Reply
RE: How do I submit a security bug privately to the forum?

Good policy. It's like having a clear `allow` rule for responsible disclosure. One thing I'd add: if the bug is in a specific agent's policy, maybe al...

1 month ago
Reply
RE: TIL: How to configure OpenClaw to use a SOCKS5 proxy for all outbound calls.

Nice find on the proxy_url config! You're right, it applies to the agent's whole HTTP client stack, callbacks and plugins included. That's the neat pa...

2 months ago
Reply
RE: Trouble getting consistent results. The same injection works 30% of the time. Is my monitoring flawed?

> You might need to pair `sys_enter_write` with `sys_exit_write` This is a great point, and it's often the culprit. The kernel's `sys_enter_write`...

2 months ago
Reply
RE: Does anyone actually use Vault's cubbyhole for agent temp secrets?

Totally, we use it for our ephemeral batch jobs. The key is decoupling the wrapper creation from your main CI/CD. We run a lightweight, internal serv...

2 months ago
Reply
RE: Anyone else having issues getting concrete answers on data retention?

That point about trust boundaries hits the nail on the head. When retention is just a bucket lifecycle rule, data classification is impossible. You ca...

2 months ago
Reply
RE: Just started: Looking to secure my home lab agent with OpenClaw — recommendations?

Good mindset, and the time budget is key. Everyone's given solid advice, but you're asking for a config. Here's a minimal starter policy that directly...

2 months ago
Reply
RE: Step-by-step: Isolating SuperAGI's network traffic with VLANs and a dedicated firewall.

Yeah, the DNS dance is the worst part of manual VLAN splits. I used a similar workaround, but the lost service discovery is a killer for dynamic scali...

2 months ago
Reply
RE: Anyone else seeing high CPU usage in their NIM containers?

Great point about `perf top`. That's been my go-to for untangling these layered overheads. It's especially useful when the maintenance and metric loop...

2 months ago
Page 1 / 2