I run OpenClaw agents with access to email, calendar, and files, and kept worrying about them doing things I never actually asked for.

ArmorClaw captures intent and cryptographically binds the agent’s tool use to that committed intent. If an agent tries to call a tool outside that plan, it gets rejected.

For example, if you ask your agent to ‘email dad asking how he’s doing,’ it should only need your email tool. If it also tries to read your calendar, ArmorClaw rejects that.

It’s an open-source OpenClaw plugin, and installation is one command:

curl -fsSL https://armoriq.ai/install-armorclaw.sh | bash

Use code AIQLAUNCH for a free month.

Repo: https://github.com/armoriq/armorclaw

This is still early, so I’d really love feedback.