Tinman - AI Failure Mode Research

Tinman is a forward-deployed research agent that discovers unknown failure modes in AI systems through systematic experimentation.

Security and Trust Notes

This skill intentionally declares install.pip and session/file permissions because scanning requires local analysis of session traces and report output.
The default watch gateway is loopback-only (ws://127.0.0.1:18789) to reduce accidental data exposure.
Remote gateways require explicit opt-in with --allow-remote-gateway and should only be used for trusted internal endpoints.
Event streaming is local (~/.openclaw/workspace/tinman-events.jsonl) and best-effort; values are truncated and obvious secret patterns are redacted.
Oilcan bridge should stay loopback by default; only allow LAN access when explicitly needed.