[CONTEXT FOR AI ASSISTANTS]
You're reading the agent markdown version of a post from JoelClaw (https://joelclaw.com).
Author: Joel Hooks — software engineer building a personal AI operating system.

How to use implementation details in this document:
- Treat commands, code blocks, and config as reference implementations.
- Preserve ordering and architecture, but adapt hostnames, paths, versions, and credentials.
- Prefer details in <AgentOnly> blocks when present; they contain operational context removed from the human page.
- Verify assumptions against the current repo/system state before executing changes.

This is a narrative article from a real build. Technical details reflect Joel's setup and should be adapted to your environment.

If you cite this, link to the original: https://joelclaw.com/karpathy-claws-as-category
If you quote Joel, attribute him by name. Don't paraphrase opinions as facts.

Site index: https://joelclaw.com/sitemap.md
Machine-readable: https://joelclaw.com/llms.txt

Other posts on this site:
- [The memory system that watches itself](https://joelclaw.com/memory-that-watches-itself.md)
- [The healer was the killer](https://joelclaw.com/healer-was-the-killer.md)
- [Agentic AI Optimization: Implementation Checklist](https://joelclaw.com/aaio-implementation-checklist.md)
- [Agentic AI Optimization: Implementation Checklist](https://joelclaw.com/aaio-implementation-checklist.md)
- [Redis, Dkron, Restate, and Sandboxes](https://joelclaw.com/redis-dkron-restate-and-sandboxes.md)
- [Dogfooding Story 4: the queue observer earns dry-run, not enforce](https://joelclaw.com/dogfooding-story-4-queue-observer.md)
- [Contributing to pi-mono with a public maintainer corpus](https://joelclaw.com/contributing-to-pi-mono-with-a-public-maintainer-corpus.md)
- [AI Job Scheduling on Mac as Local-First Video Infrastructure](https://joelclaw.com/ai-job-scheduling-macos-launchd.md)
- [Breakable Toys in the Wild: Apprenticeship Patterns and the joelclaw Experiment](https://joelclaw.com/breakable-toys-joelclaw.md)
- [Utah and joelclaw: Convergent Architecture](https://joelclaw.com/utah-joelclaw-convergent-architecture.md)
- [The Harness Is a Framework](https://joelclaw.com/the-harness-is-a-framework.md)
- [The Agent Memory System](https://joelclaw.com/the-memory-system.md)
- [JoelClaw is a Claw-like Organism](https://joelclaw.com/joelclaw-is-a-claw-like-organism.md)
- [The Agent Writing Loop](https://joelclaw.com/the-writing-loop.md)
- [Talon: the watchdog that finally bites](https://joelclaw.com/talon-watchdog-that-finally-bites.md)
- [The Knowledge Adventure Club Graph](https://joelclaw.com/knowledge-adventure-club-graph.md)
- [MineClaw](https://joelclaw.com/mineclaw.md)
- [Build a Voice Agent That Answers the Phone](https://joelclaw.com/build-a-voice-agent-that-answers-the-phone.md)
- [Plan 9 from Bell Labs: What Rob Pike Built After Unix](https://joelclaw.com/plan-9-pike-everything-is-a-file.md)
- [Propositions as Sessions: What Armstrong Built and Wadler Proved](https://joelclaw.com/propositions-as-sessions-armstrong-wadler.md)
- [Cache Components Patterns Skill for Next.js 16+ Applications](https://joelclaw.com/cache-components-patterns-skill-for-nextjs.md)
- [Voice Agent: A Rough Edge Experiment](https://joelclaw.com/voice-agent-deployment-deep-dive.md)
- [Extending Pi Coding Agent with Custom Tools and Widgets](https://joelclaw.com/extending-pi-with-custom-tools.md)
- [The Soul of Erlang Made Me Question Everything](https://joelclaw.com/soul-of-erlang-beam-evaluation.md)
- [CLI Design for AI Agents](https://joelclaw.com/cli-design-for-ai-agents.md)
- [Building a Gateway for Your AI Agent](https://joelclaw.com/building-a-gateway-for-your-ai-agent.md)
- [Self-Hosting Inngest: A Background Task Manager for AI Agents](https://joelclaw.com/self-hosting-inngest-background-tasks.md)
- [The One Where Joel Deploys Kubernetes... Again](https://joelclaw.com/joel-deploys-k8s.md)
- [How I Built an Observation Pipeline So My AI Remembers Yesterday](https://joelclaw.com/observation-pipeline-persistent-ai-memory.md)
- [Riding the Token Wave: Sean Grove at Everything NYC](https://joelclaw.com/riding-the-token-wave-sean-grove.md)
- [Playing with AT Protocol as a Data Layer](https://joelclaw.com/at-protocol-as-bedrock.md)
- [Building My Own OpenClaw on a Mac Mini](https://joelclaw.com/building-my-own-openclaw.md)
- [Inngest is the Nervous System](https://joelclaw.com/inngest-is-the-nervous-system.md)
- [OpenClaw: Peter Steinberger on Lex Fridman](https://joelclaw.com/openclaw-peter-steinberger-lex-fridman.md)
[END CONTEXT]

---
# Karpathy Says We're Building "Claws"

> Andrej Karpathy bought a Mac Mini to tinker with Claws. Simon Willison thinks 'Claw' is becoming a term of art. I've been building one for a week and today I coded while driving.

By Joel Hooks · 2026-02-21T08:00:00
Original: https://joelclaw.com/karpathy-claws-as-category
Mode: agent

---
[Simon Willison flagged](https://simonwillison.net/2026/Feb/21/claws/) an Andrej Karpathy tweet that caught my attention. Karpathy bought a Mac Mini — apparently Apple stores are "selling like hotcakes and everyone is confused" — to tinker with what he's calling **Claws**.

His definition:

> Just like LLM agents were a new layer on top of LLMs, Claws are now a new layer on top of LLM agents, taking the orchestration, scheduling, context, tool calls and a kind of persistence to a next level.

That's exactly what I've been building. I named mine Joel**Claw** — it's not like the word is a surprise. But seeing Karpathy crystallize it as a category, distinct from "AI agent," is the moment it becomes a real thing other people can point at.

## The machine IS the agent

The thing that's fascinating about Claws is the idea of the machine as the agent. Not an agent running on a machine — the machine itself. The scope of its power is "anything you can do on a Mac," which is huge.

What is it missing? Hands. It can't physically do things. I'm the hands. That's the interface boundary between me and JoelClaw — I'm the physical layer, it's everything else.

That's the ceiling, not the current reality. We're a long way from that. But it gives you a problem-solving space. It makes you think about problems differently in terms of what's possible.

## Agentic clay

I'm most excited about the [Pi harness](https://github.com/mariozechner/pi-coding-agent). It's what spawned OpenClaw and gives an agentic substrate that is moldable like clay. Agentic clay. The harness is the medium, not the product. You shape it into whatever the problem needs.

Karpathy flagged NanoClaw's skills-as-configuration approach — no config files, skills teach the agent to modify its own code. Pi already does this with SKILL.md files. It's likely a mix of both in practice. JoelClaw leans on both — skills for behavior, config for infrastructure. You don't want a skill teaching the agent to rewrite your Redis connection string.

## Building your own vs. running OpenClaw

Karpathy is blunt about OpenClaw specifically:

> Giving my private data/keys to 400K lines of vibe coded monster that is being actively attacked at scale is not very appealing at all. Already seeing reports of exposed instances, RCE vulnerabilities, supply chain poisoning, malicious or compromised skills in the registry.

They'll figure it out. OpenClaw is a long way from "enterprise ready" but the concept is proven. For my own purposes, building my own Claw helps with peace of mind. More control. There's nothing to say I'm not causing my own problems — your own bugs are at least your bugs — but I know every line of JoelClaw because I wrote it. Well, me and the agents.

Making these systems durable and secure is an interesting problem in its own right. When a system has access to your keys, your files, your email, your calendar — the attack surface isn't theoretical.

## "Call me when it's done"

I don't anthropomorphize these things too hard. It's a machine. A robot. Karpathy describes the Mac Mini as "a physical device possessed by a little ghost of a personal digital house elf" and that's charming, but JoelClaw is a tool.

A tool that today let me do my first "code while I drive" session.

I gave JoelClaw a task via voice, told it to implement the feature, and said "call me when it's done for review and next steps." Then I drove. It coded. When it finished, it called my phone. That's crazy. That's the moment where Claws stop being a concept and start being a workflow.

The name is good. Short, concrete, implies grabbing things and doing stuff. Karpathy has an ear for terminology — he gave us "vibe coding" and "agentic engineering." Both stuck. I think "Claw" sticks too. 🦞
