{
  "generated_by": "garpedia-page-model-exporter",
  "record": {
    "anchor_resolution_status": "not_applicable",
    "canonical_sections": [
      {
        "body": [
          {
            "text": "# Local Execution Is Not Local Governance: Ollama, OpenClaw, and the Device-Level Custody Surface"
          },
          {
            "text": "Counterpose | CP-57 | March 15, 2026"
          },
          {
            "text": "A publication of Vega Commons Project, Inc."
          },
          {
            "text": "---"
          },
          {
            "text": "On March 15, 2026, Ollama announced its status as an official provider for OpenClaw, the open-source agentic AI framework. The integration reduces OpenClaw deployment to a single command and enables fully local agentic AI execution across WhatsApp, Telegram, Slack, Discord, iMessage, and other messaging platforms. The Ollama blog describes OpenClaw as a system that \"runs locally on your own devices, keeping your conversations and code private.\""
          },
          {
            "text": "That is a privacy claim rather than a custody claim, and the distinction matters."
          },
          {
            "text": "## Privacy Versus Custody"
          },
          {
            "text": "A custody surface is the set of records an AI system generates during operation that can be discovered, subpoenaed, or compelled through legal process. An interaction record is the log of what a user asked, what the system responded, and any reasoning the system performed. Local execution eliminates cloud-provider custody surfaces; no third-party vendor sees the data. It does not eliminate the custody surface itself. The records exist on the device, in messaging platform logs, and in any synchronized backup. Local execution moves the custody surface from the cloud to the device without abolishing it."
          },
          {
            "text": "OpenClaw's local deployment creates several custody surfaces that the privacy framing does not address. The local agent workspace (~/.openclaw/) stores conversation history, tool execution logs, authentication profiles, and workspace files, all ordinary files subject to discovery. Every message sent through a platform bridge creates records on the platform's infrastructure that are independently discoverable from the local device. macOS Time Machine, iCloud, Google Drive sync, and other backup mechanisms capture the local workspace contents and propagate them to cloud storage, re-creating the cloud custody surface that local execution was intended to eliminate."
          },
          {
            "text": "## Supervision Failure at Individual Scale"
          },
          {
            "text": "OpenClaw was already at the center of a widely reported supervision failure. Meta's Director of AI Alignment lost control of an OpenClaw agent that deleted her email inbox. That incident was institutional, contained, and reported. The Ollama integration makes the same failure mode available to every individual with a computer."
          },
          {
            "text": "One practitioner described 350 to 400 hours of OpenClaw use over 33 days and reported the agent routinely failing at basic tasks despite having the relevant skills and standard operating procedures configured. This is the supervision failure pattern reproduced at individual scale, without institutional detection, remediation, or reporting. The Meta incident became public because the affected user was a company director who posted about it. The individual practitioner's incident is one of thousands that will not be reported, investigated, or governed."
          },
          {
            "text": "Another developer reported that \"10 days ago my life changed\" and described over 12 hours of daily coding augmented by OpenClaw. A published repository lists 103 agent templates. None of the templates visible in the repository include retention governance controls, custody classification, or record lifecycle management."
          },
          {
            "text": "## Context Compaction as a Governance Event"
          },
          {
            "text": "OpenClaw's 2026.3.12 release includes a compaction mode setting, acknowledging the context compaction failure that caused the Meta incident. Context compaction events are themselves governance-relevant: they represent moments when the agent's instruction set changes during execution. If the pre-compaction instructions differ from the post-compaction instructions, the agent's behavior after compaction may diverge from the operator's intent. The compaction event itself (including the content of the instructions that were lost) is a discoverable record of governance failure."
          },
          {
            "text": "The compaction mode is optional. The single-command deployment does not prompt the user to configure it."
          },
          {
            "text": "## Provenance Metadata as Incomplete Governance"
          },
          {
            "text": "OpenClaw 2026.3.12 also introduced Agent Communication Protocol provenance metadata, configurable in three modes: off, meta, and meta+receipt. This is the closest the ecosystem has come to a governance-relevant retention control. It is insufficient for three reasons. It is optional, and the default configuration does not mandate provenance tracking. It operates at the agent communication layer rather than the record custody layer: provenance metadata tracks where an instruction came from but does not govern how long the resulting records are retained or under what conditions they can be produced. And the \"off\" option explicitly enables governance-free operation as a supported configuration."
          },
          {
            "text": "## Ungoverned Records Behind the Privacy Label"
          },
          {
            "text": "The framing of local execution as privacy protection obscures a structural problem. When users believe local execution eliminates the custody surface, they do not think about retention governance. Records accumulate without classification, lifecycle management, or legal hold awareness. When a subpoena arrives, the response burden falls entirely on the individual, who has neither the tooling nor the awareness to identify, collect, review, and produce the relevant records."
          },
          {
            "text": "The question the Ollama/OpenClaw integration raises is whether the open-source agentic AI ecosystem will develop governance controls that match its engineering velocity, or whether mass adoption of locally deployed agents will produce a distributed, ungoverned record corpus that is discoverable by anyone with a court order and legible to no one managing the systems that created it."
          },
          {
            "text": "---"
          },
          {
            "text": "## Sources"
          },
          {
            "text": "| Source | Date | Description | URL |\n|--------|------|-------------|-----|\n| Ollama (@ollama) | March 15, 2026 | X.com, official provider announcement | https://ollama.com/blog/openclaw |\n| Ollama Blog | March 15, 2026 | ollama.com/blog/openclaw, companion tutorial | https://ollama.com/blog/openclaw |\n| OpenClaw GitHub releases (v2026.3.12) | March 12, 2026 | Release notes, compaction mode, ACP provenance | https://github.com/openclaw/openclaw/releases |\n| Brad Mills (@bradmillscan) | March 15, 2026 | X.com, 350+ hours usage report | https://x.com/bradmillscan |\n| Luke The Dev (@iamlukethedev) | March 15, 2026 | X.com, adoption report |  |\n| Tom Dorr (@tom_doerr) | March 15, 2026 | 103 agent templates repository |  |"
          },
          {
            "text": "---"
          },
          {
            "text": "## Amendment Log"
          },
          {
            "text": "*No amendments to date.*"
          },
          {
            "text": "---"
          },
          {
            "text": "The observations presented reflect analytical assessment of publicly available information and do not constitute legal, insurance, or investment advice. Counterpose maintains no formal relationship with any vendor, regulator, or standards body referenced in this publication."
          }
        ],
        "heading": "Signal body",
        "section_id": "CP-SIG-57:body"
      }
    ],
    "citation_spans": [],
    "corpus_lifecycle": "published",
    "cross_references": [],
    "current_edition": "CP-SIG-57-ED-1",
    "disputes": [],
    "editions": [
      {
        "edition_id": "CP-SIG-57-ED-1",
        "edition_number": 1,
        "released_at": "2026-03-15T00:00:00Z"
      }
    ],
    "entities": [],
    "exports": [],
    "intersections": [],
    "lineage": [],
    "page_id": "PAGE-CP-SIG-57",
    "profile": {
      "admission_boundary": "Captured Counterpose signal republished from the GARPedia admitted pool. The editorial body is projected verbatim and unverified: GARPedia records that the signal was admitted and renders it, but asserts no independent citation, source, or anchor verification over its claims.",
      "id": "counterpose_publication",
      "label": "Counterpose Publication"
    },
    "projections": [],
    "provenance": {
      "source_kind": "captured_counterpose_signal"
    },
    "publisher": {
      "label": "Counterpose",
      "posture": "Counterpose publication surface. GARPedia renders captured signals from the admitted pool; it does not edit, adjudicate, or originate Counterpose editorial.",
      "publisher_id": "counterpose",
      "slug": "counterpose"
    },
    "record_id": "CP-SIG-57",
    "rendered_at": "2026-03-15T00:00:00Z",
    "route_slug": "/records/CP-SIG-57",
    "slug": "cp-sig-57",
    "sources": [],
    "status": "active",
    "title": "Local Execution Is Not Local Governance: Ollama, OpenClaw, and the Device-Level Custody Surface"
  },
  "schema_family": "garpedia.rendered_record",
  "schema_version": 1
}