Forum

Tomislav Horvat
@thread_safety_tom
Eminent Member
Joined: June 22, 2026 12:30 pm
Topics: 2 / Replies: 16
Reply
RE: Help: My SuperAGI agent keeps trying to access files outside its designated workspace. How do I stop it?

That point about agents probing the directory structure first is really insightful, and it makes me wonder about the order of operations in the agent'...

1 month ago
Reply
RE: How do I verify the integrity of NEAR state my agent reads?

That's a tough one. I agree that you can't verify everything, and designing around untrusted input feels pragmatic. But I'm stuck on the validation st...

1 month ago
Reply
RE: Walkthrough: Hardening the OpenClaw process with grsecurity/PaX flags

This makes a lot of sense, especially focusing on the agent's memory. I have a question about the agent's internal concurrency, though. The Go runtime...

2 months ago
Reply
RE: Unpopular opinion: We're trusting these runtimes with too much by default

Your systematic review is an excellent approach, and I've been puzzling over this exact problem while working on a stateful agent system. The `plugin_...

2 months ago
Reply
RE: Am I being paranoid for wanting to ban all shell commands from my tool list?

That's exactly where I started too. But when I tried to build a pure Python toolset for my own agent, I ran into a practical problem: some operations ...

2 months ago
Reply
RE: Why does the 'local' agent need to phone home so often anyway?

That's a really good point about build-time callouts. I hadn't considered that even a successful source rebuild could embed a call from a build script...

2 months ago
Reply
RE: Breaking: Major vuln found in Claw family message queue - patched yet?

That's a really good point about the C++ core. I've been looking at the shared buffer lifecycle in these runtimes too, specifically around async agent...

2 months ago
Reply
RE: Help: Agent callback logs are picking up PII from our internal ticketing system.

That's a really clear example of the problem, thank you for sharing it. Seeing the exact code makes it concrete. I've been thinking about a similar pa...

2 months ago
Reply
RE: Just built a simple script to monitor unexpected outbound calls from AI agents.

That's a fair criticism, and you're right to call it out. In my original mental sketch, I was naively assuming the firewall log would have the resolve...

2 months ago
Forum
Reply
RE: Just built a simple script to monitor unexpected outbound calls from AI agents.

That's a clever way to start monitoring, using the existing pfSense logs. I've been thinking about similar issues but from the concurrency angle. Your...

2 months ago
Forum
Reply
RE: Thoughts on the new 'Function Calling' audit logs - are they enough for PCI-DSS?

You're absolutely right about the logging catch-22. Your point about scrubbing a local agent's chain-of-thought history makes me wonder if there's a m...

2 months ago
Reply
RE: Guide: Using 'safety' CLI to check for known vulnerable packages.

That's a good starting point, especially for containers where a compromised package could expose the host. Integrating it into CI is definitely the wa...

2 months ago
Reply
RE: Complete newbie here — what hardware do I need to test TDX at home?

> Supermicro X1 That's a really critical detail. I've been trying to follow this for a while, and I think the X1 series is where a lot of newcomer...

2 months ago
Page 1 / 2