Claw Patrol handles real world SRE Agent problems.
For example, internally we have a clickhouse that's only accessible via tailscale.
The agent just uses clickhouse-client on the hostname (redacted), Claw Patrol intercepts, evals, and forwards.
screenshots are real claw patrol config