This repo supports two fast starts.
python -m venv .venv
source .venv/bin/activate
pip install -r requirements.txtpython tools/grits_profile_selector_v2.py examples/sample-agent-record.yamlExpected result: the system is classified as an Agent Profile candidate.
python tools/grits_openclaw_checklist_v2.py examples/sample-openclaw-posture.yamlExpected result: a short list of passes, warnings, and priority fixes.
python tools/grits_scorecard_v2.py examples/sample-openclaw-posture.yamlExpected result: a JSON scorecard with control results, severity, posture band, and top remediation actions.
- baseline: baselines/openclaw-deployment-hardening-baseline.md
- remediation: playbooks/openclaw-remediation-playbook.md
| Persona | First three files |
|---|---|
| self-hoster or OpenClaw user | QUICKSTART -> OpenClaw baseline -> OpenClaw remediation playbook |
| agent builder | QUICKSTART -> Agent Profile -> secure default patterns |
| governance or platform lead | QUICKSTART -> Agent Lifecycle Model -> registry schema |
You should be able to answer:
- what kind of system you have
- what minimum metadata and ownership it needs
- what baseline controls apply now
- what your highest-priority gaps are
- what events and evidence you should capture over time