OpenClaw-native • ERC‑8004 Identity • ZK Payments • Local-first Privacy

The Trust Layer for
Autonomous AI Agents

DailyClaw adds identity, policy controls, and privacy to agents by default — along with useful runtime skills. It turns agent frameworks into trusted execution layers for real-world automation.

Identity before action Policy before execution Privacy before output
0
External data processors
Composable skills
Local‑first
By design
DailyClaw • Live Preview
Your always-on morning assistant

Vigil monitors your calendar and sets wake-up alarms automatically. Cancels them when plans change. No more manual alarms.

Specter signs payments

ETH-signed authorization proofs. Your balance stays hidden. Spend limits enforced before every payment.

Your privacy shield for AI

Sieve quietly removes personal details before AI ever sees your data: names, IDs, addresses. Restored after. Fully local.

erc8004.verified = true
agent.id = "eth:0xA1…9F"
zk.commitment = "0x3f…<hidden>"
policy.limit = "$50 / 24h"

The Trust Gap in Real Agent Execution

Agents that can act without identity, policy, or privacy controls are not deployable in real environments. They expose secrets, move funds without limits, and leave no record of what they did. DailyClaw closes that gap.

No Verified Identity

Agents that can act without a cryptographic identity are unattributable and unverifiable. Without ERC-8004, there is no on-chain proof of who owns the agent or what it is authorized to do.

Agent sends payment Processor sees: your address + history Result: Permanent payment profile built

Secrets Reach the Model Unfiltered

Your agent reads emails, documents, and messages containing passwords, API keys, and personal data. Every token goes straight to the model unfiltered — with no redaction layer in between.

Agent reads your email Model sees: "API key: sk_live_..." Result: Credentials in AI context window

No Real-World Context

Without calendar integration, your agent has no awareness of the real world. No alarms. No schedule context. No sleep nudges. You discover the 7 AM meeting when you're already late.

Early meeting tomorrow: detected? No Alarm set: none Result: You find out at 7:05 AM

No Policy Layer Before Action

A single misread instruction or agent bug can cause real financial damage. Without a policy layer, there are no spend caps, no quiet hours, no domain controls — nothing checked before an action executes.

Agent misreads instruction Sends: full balance instead of $10 Result: No limits = catastrophic loss

No Signed Audit Trail

When an agent acts, there is no cryptographic record of what it did or why. Nothing to dispute a transaction with. Nothing to verify past behavior against. No accountability.

Agent takes action Signed receipt: none Result: Nothing to dispute or verify

No Portable Agent Identity

Without a standard like ERC-8004, agents have no cryptographic identity that travels across apps. No ownership proof. Every new session starts from zero with no trust history and no continuity.

Agent acts in App A App B knows: nothing Result: No trust continuity

Identity

Verify that an agent is real, attributable, and portable across environments.

Skill 01
  • ETH key pair generation
  • EIP‑191 signed ownership proofs
  • Anti‑sybil identity constraints
  • Portable across OpenClaw apps

Rules

Constrain what agents can do before any high-risk action reaches execution.

Skill 02
  • Spend limits & quiet hours
  • Domain allow/deny lists
  • Enforced before every action
  • Per‑skill policy config

Reputation

Portable reputation built from signed local logs. Cross-app and verifiable.

Skill 03
  • Signed local event log
  • Portable reputation score
  • Cross‑app history
  • You control your data

Verification

Signed receipts and tamper-evident logs for every agent action. Fully auditable.

Skill 04
  • Signed receipts for every action
  • Tamper‑evident audit trail
  • Replay‑attack resistance
  • Local + exportable logs

Specter

Zero-knowledge payment commitments with policy checks before funds move.

Skill 05
  • ETH‑signed payment authorization
  • ZK commitment hides exact amount from processor
  • Range proof: amount ≤ limit, without revealing value
  • Rules enforced before every commitment is generated

Sieve

Detects and strips sensitive data before the model sees it. Restores real values in output. Fully local.

Skill 06
  • Three‑tier PII detection: Presidio → spaCy → regex
  • 13+ entity types (keys, emails, phone numbers…)
  • Token mapping + output rehydration
  • Runs fully local, zero data leaves

How It Works

Every agent action passes through a four-layer pipeline: identity verification, policy enforcement, skill execution, and cryptographic proof. Nothing leaves the machine unverified.

Step 01

1. Identity

ERC-8004 registration, ownership proof, portable metadata. Your agent has a verifiable on-chain identity before it ever takes an action.

Output: identity.key + ERC-8004 on-chain registration.
Step 02

2. Policy

Spend caps, permission checks, quiet hours, and manual approval gates — all defined by you, enforced synchronously before every agent action.

Output: policy rules enforced before every action.
Step 03

3. Execution

Skills run — Vigil reads your calendar, Specter authorizes payments privately, Sieve strips sensitive data — all on-device with output filtering before any response leaves.

Output: skills execute locally, output filtered before send.
Step 04

4. Verification

Every action produces a signed receipt and an entry in the tamper-evident event log. Persistent trust state. Full audit trail. Nothing unverified leaves the machine.

Output: signed receipt + audit log entry, every time.

The Three‑Pillar Stack

ERC‑8004 trustless agent identity, ZK private payments, and local-first execution. The foundation for safe real-world agent deployment.

Agent Identity Standard

ERC-8004

On-chain trustless agent registry. Register, delegate, verify, and revoke agent identities without any intermediary. Anchors DailyClaw agents to Ethereum.

trustlesson-chaindelegation
Private Payments

ZK Commitments

Pedersen-style commitments hide the exact payment amount from the processor. Range proofs confirm amount ≤ policy limit without revealing the value.

hidingrange proofno balance leak
Identity Standard

EIP-191 Signing

Cryptographic ownership proofs using standard Ethereum message signing. Portable identity across all OpenClaw apps, verifiable by anyone.

attestationportability
Privacy Model

Local Execution

Every skill runs on your machine. No data leaves your device. PII redaction, ZK commitments, and rules enforcement are all on-device.

on-devicezero data egress
Schedule Awareness

Calendar Intelligence

Full calendar awareness for your agent. Detects early meetings, sets wake-up alarms, and clears them automatically when plans change.

TeamsOutlook
Privacy Protection

Sensitive Data Redaction

Three-tier detection removes personal details before AI sees your data: names, emails, API keys, addresses. 13+ entity types, token-mapped and restored after. All local.

13+ entity typesrestored afterfully local

Make Your Agents Safe to Deploy

DailyClaw is the missing layer between agent capability and real-world execution. Early access is limited to builders participating in the next wave of autonomous agents.

No spam. Only alpha updates and product access notes.