NinoSkopac/openclaw-secure-kit

Here's a technical summary for the developer directory: --- Implements profile-driven hardening for OpenClaw deployments via DNS allowlisting and `nftables` host firewall rules, generating reproducible artifact bundles (`docker-compose.yml`, `.env`, security reports) under `out//`. The `ocs doctor` verifier performs post-deployment compliance checks across host controls (`systemd`, firewall state) and container runtime posture, writing machine-readable and human-readable security reports. Targets Ubuntu 22.04+ with Docker, emphasizing auditability and stakeholder-friendly verification outputs over impossible-bypass guarantees. --- **Word count:** 67 | **Specificity notes:** Mentions `nftables`, DNS allowlisting, artifact structure, `systemd`/container runtime checks, and Ubuntu+Docker target rather than generic "hardening" or "security."