ํ”ผ๋“œ๋กœ ๋Œ์•„๊ฐ€๊ธฐ
๐Ÿฆž I Built a Safe Autonomous Email Agent with OpenClaw and It Actually Works
Dev.toDev.to
AI/ML

Human-in-the-loop ์„ค๊ณ„๋ฅผ ํ†ตํ•œ Safe Autonomous Email Agent ๊ตฌํ˜„

๐Ÿฆž I Built a Safe Autonomous Email Agent with OpenClaw and It Actually Works

Samir Vaniya2026๋…„ 4์›” 26์ผ5๋ถ„intermediate

Context

OpenClaw ๊ธฐ๋ฐ˜์˜ ์™„์ „ ์ž์œจํ˜• AI ์—์ด์ „ํŠธ ๋„์ž… ์‹œ ๋ฐœ์ƒํ•˜๋Š” ์˜ค๋ฐœ์†ก ๋ฆฌ์Šคํฌ์™€ ์ œ์–ด ๋ถˆ๊ฐ€๋Šฅํ•œ Action ์‹คํ–‰ ๋ฌธ์ œ ์‹๋ณ„. ๋‹จ์ˆœ ์ž๋™ํ™”๋ฅผ ๋„˜์–ด ์‹ค์งˆ์ ์ธ ์‹ ๋ขฐ์„ฑ์„ ๋ณด์žฅํ•˜๋Š” ์‹œ์Šคํ…œ ์ œ์–ด ์žฅ์น˜ ํ•„์š”์„ฑ ์ฆ๋Œ€.

Technical Solution

  • Execution Layer ์ „๋‹จ์— Human-in-the-loop ๊ธฐ๋ฐ˜์˜ Approval Gate๋ฅผ ๋ฐฐ์น˜ํ•˜์—ฌ ๋น„์ •์ƒ์  ๋ฉ”์ผ ๋ฐœ์†ก ์›์ฒœ ์ฐจ๋‹จ
  • Local-Only Gateway ์„ค์ • ๋ฐ Tailscale ๊ธฐ๋ฐ˜์˜ Private Remote Access๋ฅผ ํ†ตํ•œ ์™ธ๋ถ€ ๋…ธ์ถœ ์ตœ์†Œํ™” ๋ฐ ๋ณด์•ˆ ๊ฐ•ํ™”
  • Docker Sandboxing ๋ฐ Read-Only Workspace Access ์„ค์ •์„ ํ†ตํ•œ ํ˜ธ์ŠคํŠธ ์‹œ์Šคํ…œ ๋ณดํ˜ธ ๋ฐ ์‹คํ–‰ ํ™˜๊ฒฝ ๊ฒฉ๋ฆฌ
  • Ollama ๊ธฐ๋ฐ˜์˜ Local LLM(Llama 3.3) ์ฑ„ํƒ์œผ๋กœ ๋ฐ์ดํ„ฐ ์™ธ๋ถ€ ์œ ์ถœ ๋ฐฉ์ง€ ๋ฐ ํ”„๋ผ์ด๋ฒ„์‹œ ๋ณดํ˜ธ ์ฒด๊ณ„ ๊ตฌ์ถ•
  • IMAP ์Šคํฌ๋ฆฝํŠธ์™€ OpenClaw Gateway๋ฅผ ์—ฐ๋™ํ•˜์—ฌ 'Fetch $\rightarrow$ Analyze $\rightarrow$ Draft $\rightarrow$ Wait $\rightarrow$ Execute'๋กœ ์ด์–ด์ง€๋Š” ๊ฒฐ์ •๋ก ์  ์›Œํฌํ”Œ๋กœ์šฐ ์„ค๊ณ„

- AI Agent ์„ค๊ณ„ ์‹œ Full Automation๋ณด๋‹ค Controlled Autonomy ๊ด€์ ์˜ ๊ฐ€๋“œ๋ ˆ์ผ ์šฐ์„  ์„ค๊ณ„ - ์™ธ๋ถ€ API ๋…ธ์ถœ ์ตœ์†Œํ™”๋ฅผ ์œ„ํ•œ Local Gateway ๋ฐ”์ธ๋”ฉ ๋ฐ VPN ๊ธฐ๋ฐ˜ ์ ‘๊ทผ ์ œ์–ด ๊ฒ€ํ†  - LLM ์‹คํ–‰ ํ™˜๊ฒฝ์˜ ์ž ์žฌ์  ์œ„ํ—˜์„ ๊ฒฉ๋ฆฌํ•˜๊ธฐ ์œ„ํ•œ Container Sandboxing ์ ์šฉ ์—ฌ๋ถ€ ํ™•์ธ - ๋ฏผ๊ฐ ๋ฐ์ดํ„ฐ ์ฒ˜๋ฆฌ ์‹œ Local LLM ๋„์ž…์„ ํ†ตํ•œ ๋ฐ์ดํ„ฐ ๊ฑฐ๋ฒ„๋„Œ์Šค ํ™•๋ณด

์›๋ฌธ ์ฝ๊ธฐ