SecLaw – Self-hosted AI agents on your machine, Docker-isolated
OpenClaw but in a container—fixes security by default, ships Docker isolation instead of promises.
Multi-agent Claude Code orchestrator with Telegram I/O, Docker isolation, swarm patterns, and Mission Control UI
Single Go binary: Telegram → Claude agents in isolated Docker with swarms, memory, Nix.
AI engineers, self-hosted AI enthusiasts, teams building agent systems
OpenClaw · AutoGen (Microsoft) · LangGraph
It's a single Go binary: receives Telegram messages, routes them to named agents (each with its own role, model, and config), spins up Docker containers running Claude Code via the Agent SDK, and streams responses back. A Mission Control web UI provides real-time monitoring.
Some highlights: - Named agents with smart routing (@agent_name or AI-powered) - Each agent in its own Docker container with isolated filesystem - Persistent per-agent memory via SQLite + MCP tools - Agent swarms: fan-out, pipeline, and collaborative patterns - Encrypted secrets vault (AES-256-GCM), never exposed to the LLM - Nix package manager — agents install tools on demand - Browser automation via playwright-cli - Per-agent MCP servers, plugins, and skills from the UI - Hot config reload, scheduled tasks, backup/restore
Would love feedback.
OpenClaw but in a container—fixes security by default, ships Docker isolation instead of promises.
Git worktree isolation lets agents test instruction changes without breaking other sites—clever regression prevention.
Agents pull tasks, write code, pause for review, improve skills; macOS only for now.
Claude orchestration with live dashboards and agent-spawning—well-built but competes with Anthropic, OpenAI infrastructure.
Someone actually solved the annoying UX around running dozens of agent sessions: per-agent sandboxing, a command palette with hotkeys, and built-in secrets injection make spinning up and triaging failed runs painless. There’s also an on-board assistant that can configure and drive the factory — smart move for reducing CLI friction. The tradeoff is obvious: it’s tightly coupled to macOS and Claude, so it’s brilliant if you live in that ecosystem but niche otherwise.
Git worktree isolation per agent prevents merge conflicts unlike Conductor.