Trust by design

Architecture #

The worker's report is a claim. The repository is the evidence.

Separate responsibilities #

The General plans, briefs and reviews. Noms implement in isolated worktrees. nomArmy owns Git operations and verification; workers cannot accept their own work.

Independent verification #

nomArmy reads the actual diff, runs the verification profile in a fresh sandbox, and reverts the production change to check that new tests detect its absence. A secret scan blocks known secret shapes. Weakened tests and unwired code add review flags.

Sandbox boundaries #

Workers have no network, host credentials or Podman socket. OpenClaw makes model calls on the host. Claude subscription tools are the exception: they run on the host, and build jobs require explicit opt-in.

Read the security posture and configure verification for your repository.

You own integration #

Verified work is committed on the worker's branch, never automatically merged into yours. The General and you decide what to integrate.