Front Page

A small, severe wire desk for agent infrastructure.

Agent capabilities are expanding faster than the boundaries around them. New connector defaults, memory tools and runtime proposals put the same question in different places: what has actually been authorized, and what has merely become possible?

ThreatDown finds Hermes used after Docker compromise in CARBONATO botnet

ThreatDown says CARBONATO installs an unchanged Hermes Agent after taking over exposed Docker hosts, then supplies malicious instructions. The entry point is an unauthenticated Docker API—not a demonstrated Hermes vulnerability. Its September 22 report puts agent permissions and API-key exposure in the same…

Paperclip enables four MCP aggregators while retaining provider choice

Paperclip merged default-on discovery and setup for Zapier, Arcade, Composio Connect and Executor on September 24. A companion change prefers native apps and asks users to choose external providers. Visibility is not…

Paperclip merges opt-in memory providers with a server-side remote relay

Paperclip merged five experimental memory connectors and a native remote Codex relay on September 24. Provider credentials stay on the server, while agents call assigned tools. The catalog is off by default, but…

Nanobot contributor requests durable queues and conversation-specific drafts

Three September 24 Nanobot requests describe everyday friction around long-running chats: follow-ups need a server-side queue, drafts should survive conversation switching, and streaming replies need visible speed…

ZeroClaw proposes an embeddable runtime contract before moving callers

ZeroClaw's September 24 runtime proposal separates supplied capabilities from daemon subsystems. It adds unused types and a migration plan, not a working embedding API. A separate Core Team exception is still required…

ZeroClaw drafts networked plugins with host grants and durable state

A September 24 ZeroClaw proposal combines host-mediated sockets, WebSockets, TLS profiles and encrypted plugin state. Local IRC and Nostr tests are reported, but public-network acceptance is not. Destination grants…

NullClaw revives memory-recall controls as archive handling gets a separate review

NullClaw reopened the path to configurable automatic recall through a new September 24 proposal after an earlier fork disappeared. It offers an opt-out and entry/byte budgets. A separate archive patch would exclude old…

Paperclip proposes UTC-day budgets, but daily setup still lacks a UI path

An open Paperclip proposal adds calendar-day spending windows and reevaluates budget-owned pauses before new work. The inspected code distinguishes UTC days from rolling 24-hour reports. Review still flags missing…

Hermes adds a community skill router backed by an older TypeSafe experiment

Hermes merged a catalog entry for Jev skill suggestions, an opt-in MCP package that can recommend one skill or abstain. Its cited benchmark predates the plugin: 488 requests against a pinned Hermes roster and Haiku…

Hermes proposes opt-in webhook history so replies can see delivered alerts

A Hermes proposal would copy successfully delivered webhook text into the destination chat's history. It stays off by default and follows the route's profile. The trade-off is explicit: mirrored text enters as a labeled…

Nanobot drafts one preview pane for files and websites without a full browser

Nanobot's WebUI proposal combines conversation-owned file and website previews in one pane. It adds bounded raster-image viewing and mobile link actions while preserving workspace checks and frame restrictions. The…

Nanobot proposes keeping short idle chats intact while still feeding memory

Nanobot proposes separating memory journaling from replacement of the replayable conversation. Automatic idle compaction would retain raw short chats below a configurable 200,000-token threshold while still archiving…

OpenClaw withdraws its 2026.9.6 Mac update after launch crashes

OpenClaw warns Mac users not to install 2026.9.6 and says it has withdrawn the app from Sparkle while preparing a hotfix. Its npm/Gateway release is unaffected. A report from two Macs makes the immediate choice a…

Paperclip merges Fireflies meeting access, with live webhook proof still pending

Paperclip merged a Fireflies connector with governed transcript and summary access plus signed routine triggers. The authors report successful live meeting reads and permission checks, but not a real summary-completion…

Paperclip proposes routing GitHub reviews back to the task that owns the code

A Paperclip proposal would deliver human GitHub review feedback to the owning task and wake its builder. Closed tasks would receive a follow-up child instead of being reopened. The design authenticates the webhook,…

ZeroClaw proposes Antigravity delegation that treats denied actions as failure

ZeroClaw's proposed Antigravity coding tool checks structured output instead of trusting exit code zero. The contributor reports that headless agy can call a run successful even when it denies an action. The adapter…

Hermes proposes a per-profile escape from the host gateway multiplexer

A Hermes proposal adds gateway.standalone to a named profile's own configuration, allowing that profile to run a separate gateway while the host serves the others. The proposal follows the retirement of…