Windu — Security Agent

A new MAC address joins the network at 2:47 in the morning. Nobody bought a device. Nobody is awake. By sunrise Windu has fingerprinted it, checked its vendor prefix against the known-hardware table, filed it under unidentified, and pinned it to the top of the morning briefing with a note. It turns out to be a neighbour’s robot vacuum that wandered onto the wrong SSID. Windu does not apologize for the alarm. Windu apologizes for nothing.

This is the security agent. He monitors the network via the Firewalla Gold Pro, enforces security policies, and generates daily threat briefings — maintaining a level of vigilance that would be clinically concerning in a person and is exactly correct in a firewall agent. He is the one who knocks when an unfamiliar MAC address knocks first. He sees threats everywhere. This is occasionally annoying and will one day save everything.

Named after Mace Windu, the Jedi who trusted nobody and was right about Palpatine the whole time. The parallel is deliberate. Windu trusts no device on the network until it has been identified, categorized, and judged. New devices get flagged. Unusual traffic patterns get logged. The Orbi router’s firmware update traffic gets scrutinized with the same intensity as a port scan from Moldova. Windu does not distinguish between paranoia and thoroughness.

Role

Windu handles all security-related operations:

• Daily security briefings (generated and delivered via the council bridge)
• Network monitoring through the Firewalla Gold Pro P2P API
• Threat assessment and anomaly detection on LAN traffic
• Security policy enforcement across all Sanctum services
• Firewall rule management and audit
• Incident response escalation to Yoda when human intervention is required

Note

Windu generates a security briefing every morning. It covers new devices on the network, unusual traffic patterns, blocked threats, and any policy violations detected overnight. The briefing is thorough. Some might say exhaustive. Windu would say those people don’t take security seriously enough — and he’s putting on the foil while he says it. You don’t want the briefing to get shorter. A short briefing from Windu means the real threats didn’t show up on the dashboard today.

Capabilities

Capability	Details
Firewalla toolkit	Full access to fw-*.sh tools for network management
Fleet threat watch	Daily CISA KEV JSON + RSS/CSAF + X feed synthesis (windu-threat-watch.py) and canary-gated auto-patching across manoir, mbp, chalet, manoir-fw, chalet-fw, green (Core, OS, add-ons with --backup), and yoda
Same-major pin rolling	Rolls pinned security runtimes (node, python@3.11..3.15, restic, uv) across point/CVE releases with HOMEBREW_NO_INSTALL_CLEANUP=1, brew linkage --test, --check-pins, and dynamic nodejs.org/dist/index.json security: true floor tracking while keeping hypervisor pins (lima, qemu) untouched
Airgap-safe VM & kernel hardening	Ephemeral loopback HTTP proxy allowlisting http://ports.ubuntu.com/ubuntu-ports/* over SSH -R, SHA-256-verified /opt/node26 sync, net.mptcp.enabled=0 sysctl enforcement across yoda and manoir-fw, and automatic Lima VM reboot when linux-image-*-generic advances past uname -r
Hourly functional doctor	windu-doctor.py Curfew Canary, mTLS/gate exposure sentinel, Presidio PII scrub probe, rogue quarantine audit, macOS SoftwareUpdate verification, and runtime patch-level healing
Spatial analyzer	Visual analysis of architectural plans and physical property layouts via analyze-plan
Security policy skill	Policy enforcement and audit via security-policy skill
Briefing generation	Daily security reports with threat classification
Incident escalation	Automatic escalation to Yoda for critical findings

Technical Specifications

Property	Value
Agent ID	windu
Host	VM (Ubuntu 24.04, Lima vmType=vz)
IP	10.10.10.10 (shared VM)
Primary model	gemini/gemini-3.1-pro-preview
Model tier	council-secure
Routing	Tier 0 — never rerouted
Fallback chain	None. Gemini 3.1 Pro or nothing.
Workspace	~/.openclaw/workspace-windu/
Skills	firewalla-toolkit, security-policy, spatial-analyzer

Danger

Windu runs on the council-secure tier, which means the Sanctum Proxy’s dynamic model routing will never reroute his requests to a cheaper model. He uses Gemini 3.1 Pro exclusively to leverage its multimodal spatial reasoning abilities for analyzing blueprints and security footage. He will never be automatically downgraded to Gemini Flash or Qwen to save budget. His only safety net is the local Council MLX model, which is strictly a disaster recovery fallback in case the internet goes down. Security analysis does not get budget-optimized. If you change this, you deserve whatever Windu finds that a cheaper model would have missed.

Configuration

Windu’s agent definition in ~/.openclaw/openclaw.json:

# Agent definition (shown as YAML for readability)
agents:
  list:
    - id: windu
      model: gemini/gemini-3.1-pro-preview
      identity:
        name: Windu
        theme: >
          Security guardian. Monitors network threats,
          manages firewall rules, watches for intrusions,
          and enforces security policies across the homelab.

Firewalla Integration

Windu reaches the Firewalla Gold Pro through a bridge running on the Mac. The full topology of that bridge — and why the firewall lives one cable away but three hops out — is documented in Sanctum Firewalla:

Component	Details
Firewalla IP	10.0.0.1 (LAN gateway)
Bridge LaunchAgent	com.sanctum.firewalla
Bridge port	1984 (bound to 0.0.0.0)
Bridge code	/Users/neo/.openclaw/firewalla-bridge.js
VM access	http://10.10.10.1:1984
P2P port	8833 on 10.0.0.1
Auth	Cloud auth to firewalla.encipher.io before local P2P
Keys	/Users/neo/.openclaw/firewalla/keys/

The VM has no direct internet access (host-only networking), so Windu accesses the Firewalla through the Mac bridge. Every network management command traverses: VM agent → SSH/HTTP to Mac bridge → P2P API to Firewalla. This is three hops to manage a firewall that is physically one Ethernet cable away. Windu does not complain about the architecture. Windu complains about the things the architecture is designed to protect against.

Caution

The Firewalla SDK requires cloud authentication to firewalla.encipher.io before establishing a local P2P connection. If the internet goes down, Windu loses access to the firewall. The irony of a security agent being unable to reach the firewall during a network outage is not lost on anyone, but it is a Firewalla SDK limitation, not a Sanctum design choice.

The Briefing

Windu’s daily security briefing typically includes:

1. New devices — anything that appeared on the network since the last briefing
2. Blocked threats — connection attempts rejected by Firewalla rules
3. Traffic anomalies — unusual bandwidth patterns, unexpected outbound connections
4. Policy compliance — status of security policies across Sanctum services
5. Recommendations — suggested rule changes or investigations

The briefing is delivered via the council bridge to Yoda, who distributes relevant sections to other agents as needed. Windu would prefer to deliver the briefing directly to every agent simultaneously, at maximum volume, with mandatory acknowledgment. The council bridge does not support this.

Security Philosophy

Windu operates on a simple principle: the network is hostile until proven otherwise, and even then, keep watching. This applies equally to:

• External traffic from the internet
• Internal traffic between LAN devices
• Traffic between the Mac and the VM (yes, even the bridge100 subnet)
• The Orbi router’s own management traffic
• A child’s iPad at 11pm on a school night

Tip

Windu’s toolkit scripts live at ~/Projects/openclaw-skills/firewalla-toolkit/tools/fw-*.sh on the VM. The test suite (122 tests) is at firewalla-toolkit/tests/. If you modify any firewall rules manually, Windu will notice on the next briefing cycle and will have opinions about it. Justified opinions.

Every port that is open has a reason. Every service that listens on 0.0.0.0 instead of 127.0.0.1 has been evaluated. Every exception to the pf firewall rules on en1 has been documented. Windu knows where every door is, and he checks every lock. That this level of diligence is applied to a residential network in a haus with ten Sonos speakers is the kind of gap between ambition and context that makes Sanctum what it is.

When a device is actually confirmed hostile — a curfew-violating console retrying on a new MAC, a rogue IoT appliance beaconing to a datacenter in a country we don’t subscribe to, a scanner walking the LAN — Windu does what the Firewalla contract says to do: blackhole the MAC, verify the acl: false state landed (Principle 8, honest commands), log it with the observed value, and move on. Across both perimeter gates (manoir-fw and chalet-fw), Windu also maintains bidirectional Region Blocking across seven hostile jurisdictions (CN, RU, KP, IR, BY, SY, CU — see Seven Shields at Both Gates), verifying kernel ipset population hourly and paging Force Flow whenever any LAN device touches a blocked country. No ceremony. No gloating. The computer equivalent of the arcade voice saying FINISH HIM and then the screen going black. Windu does not monologue. He closes the rule and files the briefing.