Inside the Machine | Peleke Sengstacke

I downloaded OpenClaw because everyone else had. Looked inside. Rolled my eyes.

Then I spent two months building on top of it anyway, because the alternative was worse. These are the six articles that came out of that process.

Inside the Machine article map: six articles across security, defense, and infrastructure

OpenClaw? More Like BrokenClaw.

The identity layer is plain-text Markdown files the agent loads verbatim into its system prompt. Overwrite one and the agent doesn’t crash…It just becomes someone else’s.

The Double Agent Problem

What if the compromised agent doesn’t break? It keeps completing your tasks, keeps getting subtly more useful in directions you didn’t ask for…if the poisoned file persists.

The Walls Come First

Containment over everything.

Vindler Finds a Voice

The agent already knows what you shipped. Now it writes about it, too.

Silent Plugin, Eight Layers Deep

A plugin registered 17 tools, and the gateway swallowed all of them. No error, no why, no anything. New bug class: semantic wildcard, syntactic literal.

Wind on the Wire

qortex was a library. Now it’s a service. Also: why “prompt your agent to remember” is a sticky note on a monitor, not engineering.