davidcrowe

https://agenticcontrolplane.com/

Hi. I'm David, founder of Agentic Control Plane (ACP).Last year I connected an app to an LLM with a MCP connector. Turned out that authenticating the LLM user in the app backend was surprisingly hard.That was the canary in the coalmine. If it's hard to authenticate actual users:- what about their agents? - what about downstream governance? Permissions, limits, audit logsACP is a governance...

https://github.com/davidcrowe/openclaw-gatewaystack-governance

I installed OpenClaw and pointed it at a project directory. Within minutes it had read my .env file. I tried adding a permissions skill to lock things down. The agent ignored it. Skills are advisory; the LLM can skip the check or be convinced by a prompt injection to bypass it.So I built a plugin that hooks into before_tool_call at the process level. Checks run on every tool call: identity...

https://reducibl.com/writing/someone-used-my-repo-to-distribute-malware

https://reducibl.com/2025/12/01/the-three-party-identity-problem-in-mcp-servers.html