Operation capability
Exact endpoint, exact model, bounded request, short TTL, and host-controlled revocation.
Kernel console / contract surface
OpenClaw,
inside the browser.
This local console runs the artifact-derived SQLite contract against official SQLite Wasm, crosses a fresh Worker boundary, and verifies the surviving OPFS state.
01 / Local proof
State persistence contract
Worker generations
—
Schema objects
—
OPFS recovery
unverified
Raw evidence JSON / version-bound
02 / Authority model
What crosses the boundary
Provider credential
The model API key, inference process, and model weights never enter either browser guest.
Mutable workspace
Generation-addressed commits verify the manifest and every file hash before mounting restored state.
03 / Reproduce
Bring the entire proof home.
The public source-build lane pins OpenClaw, Edge.js, Wasmer, SQLite, llama.cpp, and Qwen. For local operation, start with the self-host guide and verify every digest before launch.