#openclaw

It is tempting to describe OpenClaw as a breakthrough in autonomy. That gives it slightly too much credit. The fantasy it sold was not subtle. Give the machine a goal, leave it alone, and return to discover that it has not merely completed a task but conducted a small campaign on your behalf. In the most vulgar version, the goal is simply to make money. So the demo feed fills with the same intoxicating little story: the agent notices a pain point, writes the code, wires up payments, deploys the thing, posts the link and begins, as if by administrative sorcery, to earn while its owner sleeps.

There isn't a sandbox in the world that prevents this. Sandboxes are useful for isolating between workloads, but agents primarily need to be isolated from you. The only thing the sandbox gives you here is filesystem protections, which keep the agent from rm -rf'ing your root, and network protections, which limit which websites the agent can access. This is definitely useful. But it's not at all sufficient for safety.

OpenClaw’s default SQLite memory search struggles as your agent accumulates context. QMD replaces it with a local hybrid search engine that runs entirely on your machine. Install with bun install -g https://github.com/tobi/qmd, set memory.backend = "qmd" in your config, and restart OpenClaw.