Show HN: Claw Patrol, a security firewall for agents

Claw Patrol is a security gateway that sits between an AI agent and production environments, analyzing traffic and approving or blocking each action according to user-defined HCL (HashiCorp Configuration Language) rules.

Key Features:

• Protocol-specific filtering: Extracts and inspects facts from various protocols such as SQL (Postgres, ClickHouse), Kubernetes (resources, verbs, namespaces), and HTTP (methods, paths, headers, body).
• Fine-grained control: You can block destructive SQL commands, or configure commands like kubectl delete pod to wait for human approval before execution.
• Multiple deployment methods:
  • gateway: A proxy that runs as a single binary
  • join: Connects to the gateway via a WireGuard tunnel
  • run: Wraps and tunnels only a specific process tree on Linux (netns) or macOS (NetworkExtension)
• Rule examples: You can easily write rules that prevent specific resources (e.g., Kubernetes Secrets) from being leaked outside the cluster.