My Show HN post got flagged and killed recently because HN's software decided it read like AI-generated text. Fair enough. When you spend all day neck-deep in systems programming, drafting prose feels like a chore, and it's easy to let an assistant polish things until they read like a corporate press release.

So, to be upfront: I wrote this post with help from an AI assistant. The experiment, the code, the bugs and the numbers are mine, and every claim below links to something you can run. It's a developer sharing a messy security headache, a local Qwen model writing a file because an email told it to, and why I stopped trusting system prompts to secure AI agents.

Last week I introduced CleiMesh . This is what happened since: a setup command that wires it into OpenClaw and Hermes in one step, five bugs I only found by testing that command in throwaway Docker containers, and v0.1.3.…