They dig into agents that go rogue and why encryption is the only real control. A local-first Console keeps private data in the browser and syncs selectively. They debate agent identities, signed delegation, and how agents can discover real workflows by watching instead of asking. There is talk of embedding agents in apps, workshop surprises, and why tooling beats model hype.
01:13:11
forum Ask episode
web_stories AI Snips
view_agenda Chapters
auto_awesome Transcript
info_circle Episode notes
volunteer_activism ADVICE
Store Agent Data Locally And Share Encrypted Records
Keep agent data local and sync encrypted copies; decrypt only the records the agent is explicitly allowed to read.
Pete uses Superbase to keep a browser-local DB and syncs encrypted records so Wingman can query but not read everything.
volunteer_activism ADVICE
Make Delegation A One Tap UI Action
Expose clear UI controls for delegation so humans can grant/revoke access quickly.
Pete shows a green lock that toggles to Wingman's face to indicate explicit decryption and sharing.
insights INSIGHT
Agent Loyalty Should Be Enforced By Identity
Agents should be loyal to their owner's identity and refuse unsigned work to avoid cross-user commands.
Pete's Wingman rejects tasks not signed by the owner's Nostr key, preventing others from hijacking it.
Get the Snipd Podcast app to discover more snips from this episode
# The Good Stuff, Episode 46: Open Claw, Privacy and Agents*Hosts:* Pete and Andy (undisclosed location due to summer storm)Pete's built Console, a personal interface for Wingman that solves the agent control problem: encrypt everything, then deliberately decrypt only what you want them to see. They explore why markdown files won't scale for agent memory, how the "North Korean hacker" is a better mental model than "new employee" for AI access, and whether we're all living in a bubble. Plus: workshop penny-drop moments, embedding agents directly in apps, and why Microsoft always makes things worse.**Key Moments:**- [01:45] The OpenClaw problem: bots going off the reservation, deleting stuff, texting people they shouldn't- [02:28] "If it can write its own software and run it, it will find a way around whatever controls you put in place"- [03:28] The only hard control: encryption. "Anything I don't want you to see, I never let you see."- [05:04] Console: local database in browser, syncs to phone via Superbase, different apps use same data- [09:03] The UI: green lock means private, tap it and Wingman's face appears = he can see it- [09:58] "It's like you've brought in a North Korean hacker and said 'you don't have access to this' and he goes 'ha ha ha yes I do'"- [13:18] Agent loyalty: "He won't accept work from you. 'That's not signed by the right Nostr key.'"- [22:13] Process mapping nightmare: "People lie—they describe the absolute happy path"- [32:02] Telling Wingman off: it read ahead overnight, created tasks, then did them all. "What's all this?"- [34:35] "Where are people at with this stuff? I've got no idea."- [46:58] Workshop moment: onboarding flow agent mapped weeks of work two ladies had been doing. "How did it know?"- [56:48] "Models matter less than tools. OpenClaw is not a model thing, it's a tool thing."- [59:29] Microsoft's special skill: "We've taken this idea and done almost that, except it's shit."- [01:03:02] "I don't want to build software that's extractive. So I'm just going to build it this way anyway."- [01:09:54] The revelation: embed the agent that builds the software IN the software. "The thing is just creating itself."**Friends of the Pod:** Mike (architect, PFOTP), Mark, Justin (baited Pete back onto Twitter)**Quote:** "It's like you've brought in a North Korean hacker into your organization and you say, 'You don't have access to this,' and he goes, 'Ha ha ha, yes I do.' So you'd be like, 'All right, you can come in, but everything's encrypted.' You can walk in the door, but everything in here is gobbledygook unless I give you this magic key."
The Good Stuff