luci — Pi-side AI agent orchestration

Luci Host Model Sandboxed License: GPL v3

The Raspberry Pi 5 agent of the llamaclaw ecosystem — ZeroClaw, Gemma 4, all local.

Quick start · Runtime · Security · License


Scripts and operational knowledge for Luci, a shadow demon (in the Disenchantment sense) named by Vee on 2026-04-15. Luci runs on zeus.local via OpenClaw/ZeroClaw.

Part of the llamaclaw ecosystem.


What lives here

Path

Content

bin/luci

Main orchestrator script (11 KB executable)

bin/luci-vertex

Vertex AI backend (when Ollama is down)

bin/luci_push_task

Push a task to Luci’s queue

bin/luci_universe.sh

Install + configure Luci’s universe (workspace layout)

bin/luci_user_migration.sh

Migrate Luci to its own Linux user (was: perseus)

bin/luci_verify_specs.sh

Run Luci’s ZeroClaw spec tests

docs/luci_soul.md

Luci’s persona definition — shadow demon with a heart of gold

docs/using-luci.rst

Sphinx page: how to talk to Luci

howto/use_luci.md

Operational cheat sheet

howto/push_task_to_luci.md

Queue up a task from your laptop

howto/luci_task_catalog.md

Canonical list of tasks Luci can run

howto/luci_truman_show.md

The meta-layer: Luci watching itself

howto/migrate_luci_to_own_user.md

The dedicated-user migration runbook

papers/50-talking-to-luci.md

Thinking about Luci’s conversational affordances

papers/80-luci-truman-show.md

The Truman Show framing in depth


Luci’s runtime

Host

zeus.local — Raspberry Pi 5, 16 GB RAM, 1 TB NVMe

User

Dedicated Linux user luci (not root, not perseus)

Framework

ZeroClaw 0.6.9 (100% Rust)

Config

~/.zeroclaw/config.toml

Gateway

~/.openclaw/openclaw.json (Telegram bot + model registry)

Model

gemma4:e4b-it-q4_K_M — 8 B params, Q4_K_M, 9.6 GB, 3.5 tok/s on ARM, T=0.1

Service

systemd user service; heartbeat every 60 min

Autonomy

Supervised

Security

SSH key-only + ufw firewall + exec approvals + allowlist-only Telegram


Quick start

Talk to Luci interactively:

ssh -t perseus@zeus.local "zeroclaw agent"

One-shot query:

ssh perseus@zeus.local "zeroclaw agent -m 'hi luci, what is your status?'"

Push a task from your laptop:

bin/luci_push_task "analyze the pollution-health data for ON FSA 2021"

Security stance

Luci runs sandboxed until fully verified:

  • No agent-to-agent calls — Luci cannot talk to Yoda directly

  • No public endpoints — Telegram bot is allowlist-only

  • Exec approvals — every shell command must be confirmed

  • Dedicated Linux user with limited capabilities

See howto/migrate_luci_to_own_user.md for the user-isolation runbook.


License

GPL-3.0-or-later. See LICENSE.