Identity, permissions and provenance for Hindsight

Declared as code, enforced inside the engine.

Get started

hindclaw-extension

Server-side Hindsight extensions. JWT auth, permission enforcement, tag injection, management REST API. Install on any Hindsight server.

PyPI

terraform-provider-hindclaw

Manage users, groups, banks, permissions, directives, mental models, and entity labels as code. terraform apply and it's live.

Terraform Registry

hindclaw-openclaw

OpenClaw gateway plugin. Thin adapter — signs JWTs, auto-starts embed daemon with extensions loaded. Zero manual setup.

npm

How it works

1

Message Arrives

User sends a message via Telegram, Slack, or any channel. The client routes it to the right agent.

2

Client Signs JWT

A JWT is generated with sender, agent, channel, and topic context. Sent with every API call. No user config needed.

3

Server Resolves

Extension resolves sender to user, checks group memberships, applies the 4-layer permission cascade.

4

Memory Operates

Recall returns filtered results with tag groups. Retain stores with injected tags and strategy. All server-side.

Features

Server-Side Access Control

JWT auth, user/group permissions, tag-based recall filtering, and retain strategy enrichment — all enforced on the Hindsight server via three extensions.

Infrastructure as Code

Terraform provider for the full stack. Banks, configs, permissions, directives, mental models, entity labels — version-controlled and reviewable.

Per-Agent Memory Banks

Each agent gets its own bank with custom missions, entity labels, dispositions, and directives. 11 agents, 11 different memory behaviors.

Multi-Bank Recall

Agents read from multiple banks in parallel. Permissions checked per-bank — no unauthorized cross-reads.

Named Retain Strategies

Route conversation topics to different extraction profiles. Strategic conversations get deep analysis, daily chats get lightweight extraction.

Entity Labels

Controlled vocabulary for consistent fact classification. Multilingual aliases, tag generation, and graph-traversable entities from a single definition.

Powered by Hindsight

HindClaw is built on Hindsight by Vectorize — the highest-scoring agent memory system on the LongMemEval benchmark. We build the access control and infrastructure layer. They build the memory engine.