Building a digital doorman

Larson runs a dual-agent system. A tiny public doorman, nullclaw, lives on a $7 VPS. A private host, ironclaw, runs over Tailscale. Nullclaw sandboxes repo cloning. It routes heavy work to ironclaw via A2A JSON‑RPC. It enforces UFW, Cloudflare proxying, and single‑gateway billing.