{"id":45166827,"url":"https://github.com/gazman-dev/sheriffclaw","last_synced_at":"2026-03-07T05:11:54.360Z","repository":{"id":339125189,"uuid":"1158665267","full_name":"Gazman-Dev/sheriffclaw","owner":"Gazman-Dev","description":"A safe way to use AI that can do anything","archived":false,"fork":false,"pushed_at":"2026-02-28T22:09:03.000Z","size":542,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-02-28T22:54:24.680Z","etag":null,"topics":["ai","ai-agents","ai-tools","security"],"latest_commit_sha":null,"homepage":"https://sheriffclaw.dev","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Gazman-Dev.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","dco":null,"cla":null}},"created_at":"2026-02-15T18:24:52.000Z","updated_at":"2026-02-28T22:08:47.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/Gazman-Dev/sheriffclaw","commit_stats":null,"previous_names":["gazman-dev/sheriffclaw"],"tags_count":126,"template":false,"template_full_name":null,"purl":"pkg:github/Gazman-Dev/sheriffclaw","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Gazman-Dev%2Fsheriffclaw","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Gazman-Dev%2Fsheriffclaw/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Gazman-Dev%2Fsheriffclaw/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Gazman-Dev%2Fsheriffclaw/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Gazman-Dev","download_url":"https://codeload.github.com/Gazman-Dev/sheriffclaw/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Gazman-Dev%2Fsheriffclaw/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30111727,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-05T03:40:26.266Z","status":"ssl_error","status_checked_at":"2026-03-05T03:39:15.902Z","response_time":93,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ai","ai-agents","ai-tools","security"],"created_at":"2026-02-20T07:03:09.781Z","updated_at":"2026-03-05T05:01:50.254Z","avatar_url":"https://github.com/Gazman-Dev.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Project Status\n\nPre‑Alpha — **Do not install in production yet**\n\n---\n\n# Sheriff Claw 🤠\n\n**The AI Firewall for Secure Autonomous Agents**\n\nSheriff Claw lets you use powerful AI agents **without giving them access to your secrets or your system**.\n\nIt is a **safe, controlled alternative to Open Claw**, built for people who want real AI power *without* losing control,\nprivacy, or security.\n\n---\n\n## 🔐 The Three Promises\n\nSheriff Claw is built around three non‑negotiable guarantees:\n\n### 1️⃣ No Public Internet Exposure\n\nYour system is **never exposed to the public internet**.\n\n* No open ports\n* No inbound access\n* No random scanning or drive‑by attacks\n\nIf someone doesn’t already have access to your Telegram account or your device, **they cannot even see you exist**.\n\n---\n\n### 2️⃣ AI Never Sees Your Secrets\n\nYour AI agent **can never read your passwords, API keys, or tokens**.\n\n* No secrets in environment variables\n* No plaintext config files\n* No prompt injection attacks\n\nEven if the AI is manipulated, jailbroken, or hallucinating — **it has nothing to steal**.\n\n---\n\n### 3️⃣ You Approve Every Capability\n\nThe AI **cannot run arbitrary commands**.\n\n* It can only access services you explicitly approve\n* It cannot execute random system actions\n* It cannot “hallucinate” permissions\n\nYou are always in control. The AI works *for* you, not *instead of* you.\n\n---\n\n## 🧠 What Is Sheriff Claw?\n\nSheriff Claw is the **first true AI firewall**.\n\nIt sits between:\n\n* Your **AI agent** (smart, powerful, untrusted)\n* Your **system and secrets** (trusted, protected)\n\nThe AI never touches raw secrets or devices directly.\nEverything goes through the Sheriff.\n\n\u003e Think of it like this:\n\u003e\n\u003e * The AI is the worker\n\u003e * The Sheriff is the security guard\n\u003e * You are the boss\n\n---\n\n## 🔒 How It Works (Non‑Technical Overview)\n\nSheriff Claw uses **two separate communication channels**:\n\n### 🛡️ The Sheriff Channel (Secure Control)\n\n* A private Telegram channel\n* Talks only to **the Sheriff program running on your device**\n* Handles passwords, approvals, and permissions\n\nThe Sheriff is **not an AI**.\nIt is a strict, deterministic security program.\n\n---\n\n### 🤖 The AI Channel (The Worker)\n\n* A separate Telegram channel\n* Where you talk to your AI agent\n* Used for tasks like:\n\n    * Research\n    * Writing code\n    * Automation\n    * Planning\n\nThe AI **cannot access the Sheriff channel**.\n\n---\n\n## 🔑 Secure Workflow Example\n\n**Goal:** Post a daily tweet about trending news.\n\n1. You tell the AI:\n   *\"Check the news and post the top story every morning.\"*\n\n2. The AI realizes it needs an **X (Twitter) token**.\n\n3. The Sheriff messages you privately:\n   *\"The AI needs an X token. Please provide it.\"*\n\n4. You enter the token **securely**.\n\n5. The Sheriff encrypts and stores it.\n\n6. The AI sends tweet text to the Sheriff.\n\n7. The Sheriff signs and posts the tweet.\n\n✅ **Result:**\n\n* The tweet is posted\n* The AI never saw the token\n* Nothing sensitive was exposed\n\n---\n\n## 🛡️ Why This Is Actually Safe\n\n* **No social engineering:** The Sheriff cannot be tricked — it is not an AI\n* **No prompt injection:** The AI has zero access to secrets\n* **No persistence risk:** Secrets disappear after reboot until you unlock\n\n---\n\n## 🧩 Technical Architecture (For Developers)\n\n### 🐍 Python‑Only, Isolated Services\n\n* Written entirely in Python\n* Each component runs as an isolated service\n* Clear boundaries between responsibilities\n\n---\n\n### 🧪 Debug \u0026 Test First Design\n\n* Every service has a **debug implementation**\n* Used for:\n\n    * Unit tests\n    * Integration tests\n    * Deterministic simulations\n\nProduction code never mixes with test logic.\n\n---\n\n### 🔐 Secrets Database\n\n* Encrypted SQLite database\n* Stores:\n\n    * Secrets\n    * Configs\n    * Permissions\n\n**Critical security property:**\n\n* The master password is **never stored**\n* It exists **only in RAM**\n* After reboot, the system is locked\n\nEven with root access, an attacker gets nothing.\n\n---\n\n## 🔒 End‑to‑End Secret Entry (Telegram)\n\nSheriff Claw only communicates via:\n\n* Telegram channels\n* Local device communication\n\n### Why Telegram?\n\nTelegram supports **inline HTML apps**.\nSheriff Claw uses them for secure secret entry:\n\n1. Sheriff sends an HTML password form\n2. You enter a secret\n3. JavaScript encrypts it using the agent’s public key\n4. Encrypted data is sent back via Telegram\n\nNo third‑party services.\nNo plaintext transmission.\nTrue end‑to‑end encryption.\n\n---\n\n## 🚀 Quick Install (macOS)\n\n```bash\ncurl -fsSL https://raw.githubusercontent.com/Gazman-Dev/sheriffclaw/main/install.sh | bash\n```\n\nThe installer:\n\n* Downloads Sheriff Claw\n* Guides initial setup\n* Connects Telegram channels\n\n---\n\n## 🖥️ Terminal Channel\n\nStart an interactive session:\n\n```bash\nsheriff-ctl chat\n```\n\nRouting rules:\n\n* Messages starting with `/` → **Sheriff**\n* Everything else → **AI agent**\n\nExamples:\n\n* `/status`\n* `/ yes I agree`\n* `what should I automate next?`\n\n---\n\n**Sheriff Claw gives you real AI power — on your terms.** 🤠\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgazman-dev%2Fsheriffclaw","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgazman-dev%2Fsheriffclaw","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgazman-dev%2Fsheriffclaw/lists"}