WardenClaw puts an approval key off the server

Field notes

The install distinguishes routine commands, which the page says run and are journaled, from rule-triggering commands held for approval. A signed decision covers the exact command, a single-use nonce, and a ±60-second window; the page says the signing key stays off the server. Its scope statement leaves actions inside an already-running process—such as file writes and network access—to the sandbox. The site labels the software an open-source prototype.