I didn't want my OpenClaw to leak credentials or make requests to some domains so I built a network-level security layer to do credential vaulting, domain allow/blocklists and audit logging.
It takes a few commands to setup and then you can use hash values or environment variables in place of your credentials and Reasonlayer injects the actual values at runtime through an on-device proxy, after it applies allow/block rules.
Works with Linux or Mac right now.
Happy to answer any questions or help with setup!