ClawGuard

Local AI that safely touches the world, with zero token exposure.

Core reasoning runs locally. A cloud intermediary exchanges scoped tokens through Auth0 Token Vault, so OAuth tokens never reach the device. Every external call is gated by permission preview, offline queue, anomaly shield, and CIBA step-up, with a live SSE audit trail and one-click revoke in under two seconds.