FRESH

Hacker News

Show HN: Automate your workflow in plain English

8 points by Mrakermo

by tomjwxf

0 subcomment

The staged autonomy pattern ("trust is earnable") maps directly to what we built with protect-mcp — shadow mode first (log everything, block nothing), then enforce when you've seen enough data to trust the policies.
For the prompt injection concern: protect-mcp wraps MCP tool calls with per-tool policies. Even if the agent gets injected, it can't call tools outside the policy. Every decision is optionally Ed25519-signed and verifiable offline.
npmjs.com/package/protect-mcp

by conception

0 subcomment

Nothing about prompt injection protections. This appears to be openclaw but trusting that you won’t silently expose all your (our) data.

by rafaelbcs

0 subcomment