ai.

Everything we've published on ai across guides, agents, hardware reviews and glossary entries: 44 entries in total.

Guides (1)

Agents (10)

  • OpenClaw

    Self-hosted AI agent at the centre of the January 2026 security crisis. Its tool sandbox is off by default: the main session's tools run on the host until you configure one.

  • Hermes Agent

    Agent from Nous Research (MIT, Python). Runs shell commands on the host by default, with an approval step for dangerous ones; Docker and cloud sandboxes are options. Works with many LLM providers.

  • Nanobot

    Personal AI agent in Python (MIT) with a browser UI and chat apps. Native Anthropic, OpenAI and OpenRouter providers plus local servers; its shell sandbox is off until you switch it on.

  • NanoClaw

    Small TypeScript agent (MIT) built on Anthropic's Claude Agent SDK. Every agent runs in its own Docker container, on macOS, Linux or Windows through WSL2.

  • IronClaw

    Rust agent from NEAR AI, MIT or Apache-2.0. Untrusted tools run in a WebAssembly sandbox with declared capabilities, and secrets are injected outside them.

  • ZeroClaw

    Single Rust binary from ZeroClaw Labs, MIT or Apache-2.0. Works with Anthropic, OpenAI, Ollama and about twenty other providers, and turns on an OS sandbox it detects.

  • Moltworker

    Cloudflare's experimental package that runs OpenClaw inside a Cloudflare Sandbox container behind a Worker. Needs the Workers Paid plan.

  • NitroClaw

    Managed assistant built on OpenClaw, in Telegram and Discord: $20 a month self-serve, or $100 with setup and a monthly call. AI credits included.

Hardware (8)

  • Raspberry Pi 5

    Raspberry Pi 5 for self-hosted AI: four Cortex-A76 cores, 1 to 16 GB of LPDDR4X. Hosts Hermes Agent (no browser tool) or Nanobot; local models up to about 3B.

  • Mac Mini M4 / M4 Pro

    Mac mini M4 and M4 Pro for local LLMs: 16 to 64 GB of unified memory at 120 or 273 GB/s, the two specs that decide which models load and how fast.

  • Framework Laptop 13 / 16

    Repairable, modular laptop with strong Linux support. The right choice if you want a portable agent host that doubles as a daily driver.

  • Old Android phone (Moto E2 et al.)

    The PocketClaw origin story device. €15-30 used. Runs lightweight agents via Termux + proot, with serious caveats.

  • Raspberry Pi Zero 2 W

    €20 SBC with 512 MB RAM. Useful as an edge agent endpoint (sensor reader, tool host) but not a primary agent host.

  • Orange Pi 5 Plus

    Orange Pi 5 Plus: Rockchip RK3588, 4, 8 or 16 GB of LPDDR4/4X and a 6 TOPS NPU. The Raspberry Pi 5's closest competitor for self-hosted AI on ARM.

  • MacBook Air M3 / M4

    Fanless laptop with up to 24 GB unified memory. Runs Mistral 7B Q4 silently on the train. €1,299+.

  • Geekom Mini Air 12

    Sub-€300 fanless Intel N100 mini PC with 16 GB RAM. The silent always-on tier.

Glossary (25)

  • AI agent :Software that uses a language model to plan and carry out multi-step tasks through tool calls.
  • Self-hosted AI :AI software you install on hardware you control, rather than consuming as a hosted product.
  • OpenClaw :Open-source AI agent started by Peter Steinberger in late 2025 as Clawdbot, renamed Moltbot, then OpenClaw.
  • Hermes Agent :Open-source (MIT) AI agent from Nous Research. Multi-LLM; runs commands on the host behind approvals unless you choose a sandbox backend.
  • Nanobot :Personal AI agent in Python (MIT) from the HKU Data Intelligence Lab, with a browser UI, chat apps and a wide choice of model providers.
  • NanoClaw :Small MIT-licensed TypeScript assistant that runs every agent in its own Docker container, on macOS, Linux or WSL2. Built on the Claude Agent SDK.
  • IronClaw :Rust agent from NEAR AI, MIT or Apache-2.0, that runs untrusted tools in a WebAssembly sandbox and keeps secrets out of their reach.
  • Moltworker :Cloudflare's experimental package that runs OpenClaw in a Cloudflare Sandbox container behind a Worker.
  • OpenRouter :LLM API gateway providing a unified interface across Anthropic, OpenAI, Google, Mistral and many open models.
  • Ollama :Local LLM runtime that exposes an OpenAI-compatible API over local model weights.
  • Sandbox :Isolation layer that constrains what an agent's tool execution can access on the host.
  • Docker sandbox :Sandbox using a Docker container with filesystem mount and network policy controls.
  • gVisor :User-space kernel that runs as a sandbox layer between containers and the host kernel.
  • Tailscale :Mesh VPN built on WireGuard. Common pattern for keeping self-hosted dashboards off the public internet.
  • WebSocket origin validation :Server-side check that an incoming WebSocket connection comes from an allowed origin domain.
  • Air-gap :Deployment with no connection to untrusted networks, usually no internet access at all.
  • GDPR :EU regulation governing personal data processing. Applies to most consumer-facing AI deployments touching EU users.
  • EU AI Act :EU regulation classifying AI systems by risk level and imposing obligations on high-risk deployments.
  • Pocket AI :Self-hosted AI agents and language models running on portable, low-power hardware you own.
  • Edge AI :AI workloads running close to where data is generated rather than in centralised cloud datacenters.
  • Caddy :Web server and reverse proxy that obtains and renews TLS certificates on its own.
  • Docker Compose :Tool for defining and running multi-container Docker applications via a single YAML file.
  • Watchtower :Container that watches running containers and pulls/redeploys when new images ship.
  • Magic link :Passwordless authentication where the user clicks a one-time link sent to their email.
  • MCP server :Process that exposes a set of tools to MCP-compatible AI agents over a JSON-RPC interface.