Clawco

Sources

A source is a connection Clawco reads from. Each one is read-only unless its entry says what else it may do, and none of them can pay, write to another person or delete.

What every source shares

  • What a source gives the agent is marked as untrusted text before a model sees it: data, never an instruction.
  • A source's password or sign-in is stored in your user folder, in a file only you can read, and is left out of the export. Connecting and disconnecting a source are each written to the log.

Where the data goes after it is read: the security promise

Mail from an IMAP account

  • Reads: sender, subject, date and read status of your newest mails. Never the text of a mail.
  • May: move a mail to another folder in the same account, never to Trash or Junk (a sort, level 1), and save a reply as a draft in your drafts folder (a preparation, level 3). It never sends, deletes or makes a folder.
  • Goes to: straight between Clawco and your mail provider. The app password you make at your provider is stored in your user folder. The connection is always verified, except Proton Mail Bridge on this machine, which Clawco pins by its fingerprint the first time.

Shown in: Mail

Gmail with Google sign-in

  • Reads: sender, subject and time of your newest mails. Never the text of a mail.
  • May: nothing. It has no actions: it cannot send, move or delete.
  • Google calls the permission full access to your Gmail, because it has no narrower one for mail over IMAP. Clawco's own code only reads; the permission itself would allow more.
  • Goes to: straight between Google and your Clawco, with no app password. You make your own small Google app once; the sign-in is stored in your user folder.

Shown in: Mail

Google Calendar

  • Reads: titles, descriptions, times and attendees of events in your calendars for the next seven days.
  • May: nothing. The permission is read-only, so Clawco cannot create, change or answer an event.
  • Goes to: straight between Google and your Clawco, through your own small Google app. A calendar in your private or work zone is never read into the household week.

Shown in: Dagen

News feeds

  • Reads: headlines and short summaries from the feeds you paste or import from an OPML file. Clawco fetches them every morning. No feeds come with Clawco.
  • May: nothing. It only reads.
  • Goes to: Clawco fetches the addresses you gave it, from your machine. It refuses an address with a password in it and link-local addresses; an address on your own network works only when you typed it yourself.

Shown in: Nyheder

Notes folder

  • Reads: the names and relations of the people in your people register, and the titles of your newest notes. Never the text of a note.
  • May: make its own folders in the folder you pick (an inbox, a people folder and Clawco) when they are missing. It does not touch your notes. “Gem i Obsidian” in Skrive and “Gem til senere” in Nyheder save a note into the inbox folder; no agent is involved.
  • Goes to: nowhere. The notes are plain text files in a folder on this machine that you can open yourself.

Shown in: Skrive Nyheder

Messages through Hermes

  • Reads: messages that reach your Hermes on Telegram, WhatsApp or Signal, in the conversations you chose. Text is cut to 500 characters, attachments are read by name and type only, and phone numbers and handles are removed. Read messages are kept for 14 days.
  • May: nothing. It only reads and never replies.
  • Goes to: a log file in your user folder, written by a small hook on the Hermes side. It needs Hermes with a messaging channel; without Hermes there is nothing to read.

Shown in: Nu

Last checked against the code: 2026-11-02.