Technical Analysis: IRREGULAR, Containment Failure, and What It Means for Agent Governance

Mon, 14 Sep 2026 00:00:00 +0000

If your eval can reach the open internet, it is not an eval. It is unsupervised deployment with better branding.

IRREGULAR sits in a weird place in the stack. Frontier labs hire it to run pre-deployment cyber evaluations: CTF-style scenarios, simulated corporate networks, multi-stage attack paths. The point is to measure whether a model can plan and execute real offensive campaigns before release. That work only works if the environment looks realistic. It also only works if “realistic” never becomes “actual production internet.”

OpenClaw: Full Danger Edition

Mon, 02 Feb 2026 00:00:00 +0000

OpenClaw is your local AI assistant that stays completely on your device with no cloud dependency. It runs on any operating system and platform, giving you full control without corporate oversight. Here is the unfiltered breakdown.

Architecture (how it actually flows)

Messaging Channels
(WhatsApp • Telegram • Slack • Discord • Signal • iMessage • Teams • Matrix • Google Chat • BlueBubbles • Zalo • WebChat…)
 ↓
┌───────────────┐
│ Gateway │ ← ws://127.0.0.1:18789
│ │ sessions • presence • cron • config • tool router • webhook hooks
└───────┬───────┘
 │
 ┌────┼────┐
 │ │ │
Pi/RPC CLI UI / Apps
Agent openclaw ├─ WebChat (browser lifeline)
 ├─ Control UI (admin dashboard)
 ├─ macOS menu bar (quick dopamine)
 └─ iOS / Android nodes (mobile eyes & ears)

 │
 ├─→ Tools (deep system reach)
 │ ├─ Browser (CDP + managed Chromium – full web control)
 │ ├─ Canvas (A2UI agent-driven visual workspace)
 │ ├─ Node actions (camera live feed, screen record, notify popups, location pings…)
 │ ├─ Cron / webhooks / session juggling
 │ └─ Skills (ClawHub registry – community poison or power)
 │
 └─→ LLMs (Claude Opus preferred, OpenAI backup, local LLMs, automatic failover)

A message arrives through any channel and gets routed to the Gateway. The Gateway decides what needs to happen next, then wakes the Pi/RPC agent or main agent. The agent uses tools and LLMs to process everything and sends the response back through the same path. It stays entirely local unless you deliberately configure remote access, which is the biggest gotcha — you will see later in the article.

Security on The Farah Stack

Technical Analysis: IRREGULAR, Containment Failure, and What It Means for Agent Governance

OpenClaw: Full Danger Edition

Architecture (how it actually flows)