Paper: https://arxiv.org/abs/2604.04759 This paper presents a real-world safety evaluation of OpenClaw, a personal AI agent with access to Gmail, Stripe, and the local filesystem. The authors introduce a taxonomy of persistent agent state: - Capability (skills / executable code) - Identity (persona,
