The “Local” AI Agent and the Mental Model That Doesn’t Fit

A security practitioner’s notes on OpenClaw architecture