I built OpenLegion because every AI agent framework I tried had the same problems in production: API keys sitting in config files inside the agent's environment, no way to set hard spend limits, and LLM-as-CEO task routing that's non-deterministic and unauditable.

The short version of what I built:

Security: Every agent runs in its own Docker container or microVM. A vault proxy sits between agents and every LLM call — the agent sends a request, the proxy injects the credential at the network layer, the agent gets back a response. Keys never exist inside the container. Six independent security layers on by default, including per-agent ACL matrices and Unicode sanitization to block invisible-character prompt injection.

Cost control: Per-agent daily and monthly budgets with a hard cutoff enforced at the vault proxy. The agent physically cannot make an LLM call that exceeds its budget. Zero markup on LLM usage — you pay your provider directly at their rates. 100+ providers via LiteLLM with configurable failover chains.

Orchestration: Deterministic YAML DAG workflows. No LLM deciding what runs next. Four patterns: sequential, parallel, supervisor, hierarchical. Every execution path is predictable and auditable.

The rest: Camoufox stealth browser (C++-level anti-detection, CAPTCHA solving), persistent per-agent vector+BM25 memory with temporal decay, MCP tool support, real-time fleet dashboard, Telegram/Discord/Slack/WhatsApp channels, cron + webhook triggering, agents can write and hot-reload their own Python skills at runtime.

The engine is ~30,000 lines of Python with 2,100+ tests. Self-hosted runs on one machine — no Redis, no Kubernetes, just Python 3.10+, Docker, and an API key. Three commands to start.

For context: the dominant framework in this space is OpenClaw (200K+ stars). CVE-2026-25253 was reported in February — critical RCE, 42,000 exposed instances with no authentication, 341 malicious skills confirmed stealing user data. I'm not trying to replace it, but that's why I think this gap exists.

We launched in February 2026. Zero CVEs. BSL 1.1 license — source-available, not open source, and I want to be clear about that. Managed hosting starts at $19/month with a 7-day free trial. Self-hosted is free.

Happy to get specific about the security model or architecture — genuinely curious where people think the threat model breaks down.

https://openlegion.ai | https://docs.openlegion.ai

Jürgen Habermas Dies at 96; One of Postwar Germany's Most Influential Thinkers

The POC Valley

Can a "Living Drug" Cure Autoimmune Diseases?

Free LLM cost calculator – what your AI product costs across providers

Recommended workbook for those of you interested in Japanese

The most brilliant move in corporate history?

I use the 'cupcake' prompt to catch when AI is guessing

Creating a biologically-inspired AI system from the ground up

Being Stomp Agnostic

Mel Frequency Cepstral Coefficients

You Will Never Look at T Shirts the Same [video]

The "are you sure?" Problem: Why AI keeps changing its mind

Wallstreetbets for AI Agent – 1k post/predict

Tons of new LLM bot accounts here

Personal Learning about Context Engineering

To Sparsify or to Quantize: A Hardware Architecture View

Claude Code won't go away but I'm certain the damage reach its maximum soon

OpenLobster – Go Rewrite of OpenClaw with Neo4j, OAuth 2.1, Proper RBAC

The Mistake Picnic

Multi-model AI API for detecting stereotypes and toxic language

Show HN: OpenLegion – AI agent fleet with container isolation and vault proxy

The Most Interesting Fund in the World

An experiment about an LLM driven robot

Thiel's secretive Rome conference draws Church attention

Happy Map

Solving AI Sprawl: Using Git Worktrees and ADRs to Govern Parallel Agents

The Camel's Camel

StackMatches – Dating App for Substack Users

OAuth-inspired delegated AI access stop sharing raw API keys

The bureaucracy blocking the chance at a cure

Show HN: Crabby, open source web+API synthetic monitoring