NEAR AI's IronClaw has 74 crates, 95 active contributors, and a capability-based security architecture. I have a side project and three kids. So I traced where a model's tool call actually goes in their shipping binary. The new engine ships behind an env flag that defaults to off. The capability lease guarding execution derives Clone and Deserialize. Here's why agent runtime security belongs in the type system, and five questions to ask any runtime before you trust it.
#ai-agents #security #rust
