Overview
In this keynote and subsequent AMA, Peter Steinberger reflects on the first five months of OpenClaw, which he characterizes as the fastest-growing software project in GitHub history. He describes the unique challenges of 'stripper pole growth,' noting that the project has reached nearly 30,000 commits and 2,000 contributors. Steinberger addresses the intense scrutiny regarding OpenClaw's security, revealing that the project handles over 16 critical security advisories daily—double that of the Linux kernel—though he argues many represent 'AI slop' or bad-faith reports from researchers who bypass default security protocols. He emphasizes a transition toward the OpenClaw Foundation to ensure a 'Switzerland-like' neutrality, even as he works at OpenAI. The discussion explores the philosophy of 'agentic' software, where human 'taste' and system design remain the primary moats against a rising tide of AI-generated code. Steinberger ultimately advocates for a future of local data ownership and ubiquitous agents that operate with distinct personalities or 'souls.'
Sections
Project Metrics and Security Data
Key performance indicators and security vulnerability statistics for OpenClaw.
- Project Stats: 30,000 commits, ~30,000 PRs, ~2,000 contributors within 5 months.
- Security: 1,142 total advisories; 469 published; 60% closure rate. CVSS 10.0 incidents frequently reported for marginal use-cases (e.g., read/write permission bypass on unreleased features).
- Dependency Risk: Supply chain attack via MS Teams/Slack through an unpinned Axios dependency.
Managing Open Source on 'Hard Mode'
Insights into managing high-velocity community projects and AI-driven development.
- Running a large foundation is like a company on 'hard mode' because you cannot directly command volunteers.
- Agents should follow the 'Toby Luca' trust system: building reputation over time so that trusted entities get more privileged access.
- Avoid 'Dark Factories' in software development; an iterative, human-led approach is superior to fully automated waterfalls because the path to the 'mountain top' is never straight.
Meta-Level Observations on AI Agents
Synthesis of the current state of agentic software and industry dynamics.
- AI is fundamentally changing the security landscape by making complex multi-chain exploits easy to find, effectively 'breaking' all legacy software that hasn't accounted for agentic attackers.
- The 'Soul' of an agent (its personality and quirks) is not just aesthetic but a requirement for user trust and natural interaction in non-search contexts like messaging apps.
- Open source agentic frameworks act as a gateway drug for the enterprise; as individuals use them at home, they create bottom-up pressure for AI adoption in the workplace.