Wong: Operators should grant AI agents incremental access like new interns
Sze Wong · OpenClaw is the Most Dangerous AI Tool Ever Built · Mar 3, 2026 · at 5:44
Sze Wong explains his framework for sandboxing and granting permission boundaries to autonomous AI agents.
0:00 / 0:23exact quote · 23.8s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“You will hire an intern and say, look, I don't know you, your resume set, you're great at whatever, bookkeeping. So here's the book. I won't even give you the entire book, right? This is the invoice of this month. Go put it in, and we'll see how you do work. And if you do that good, then we'll give you more access. That should be how you treat an AI agent.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Sze Wong
Wong: Anthropic, Google, and Microsoft will clone OpenClaw in ten months
“My prediction is this within n number of months, less than 10 Entropic, now, now Open Claw become part of OpenAI, so that becomes the OpenAI part of this game. Entropic, Google, Microsoft, Everybody will have their equivalent of open, open call framework.”
Wong: Future startups will sell AI agent teams instead of SaaS
“We're not building, I mean, the analogy I'm using is you're not going to build an accounting software that people sign up for. You're going to build an accounting team that people hire. The AI team is the, is what people will hire in the future.”
Wong: The window of opportunity for AI agent startups is 18 months
“Today, It's very easy to get Vico into version 0.1, but from 0.1 to one takes a long time. Yes. And yeah, so that's today's, that's where we are today, but that's not going to last long. So this window of opportunity I think lasts about a year, year and a half…”
Wong runs five to six isolated cloud instances of OpenClaw
“Now I have not, I have now, Five, maybe six instances of open cloud installed, but they're all in the cloud, isolated. I give them limited access.”
Wong: Software generation with Opus 4.6 is easy, but infrastructure is hard
“With Entropic right now with Opus 4.6, building anything becomes so easy. The difficulty is putting it online and putting safety around it. Putting, making it secure, making it scalable, I mean, those are classic infrastructure thing, which I have to do for no…”
Wong will invest $10,000 in startups building systems using OpenClaw
“I'm going to start a program for anybody who use OpenClaw to, we want people to build startups from using OpenClaw, and we'll put a little bit of money, we'll put 10 K into, I mean, I don't want to say winning team because there is a potential we do more than …”