Built my IronClaw agent on Windows — the security model that sold me, and the rough edges

Spent a couple days standing up a personal agent on IronClaw. Sharing the honest version, rough edges included, since most writeups here seem to be on Mac/Linux.
What actually sold me on IronClaw is that the security is architectural, not vibes. Secrets sit in an encrypted vault and the model only ever sees placeholders. Every tool runs in its own WASM sandbox. I installed a skill and watched the outbound scan kill a curl before anything left the box. For an agent that holds credentials, that's the whole point.
The custody wallet is the part I like most. Set it up through the Outlayer skill — the agent operates a wallet but holds no private key. A policy engine caps every transaction, and I keep an approval gate on anything that moves funds. My dedicated NEAR account is the controller, so nothing with real value is in the blast radius. I wouldn't hand an LLM full autonomy over money, and IronClaw lets me not have to.
Windows gotchas, for anyone on the same path:
The PowerShell installer 404s — it builds download URLs from tag v0.29.1 while the release is actually tagged ironclaw-v0.29.1. Went tar.gz instead, verified the SHA256, done.
MSI needs UAC; OS keychain isn't supported, so the master key lands in an env file.
After the instance sat idle, the saved model id had vanished from the NEAR AI catalog and chat died with a 400. Re-checking selected_model fixed it.
Skills over 64KB silently don't load — had to trim a 95KB SKILL.md and move the rest to a reference file.
What it does now: Telegram channel with pairing, GitHub + Google (Drive/Calendar/Sheets) through Composio, a weekly routine that watches the IronClaw releases page and pings me, live NEAR price checks.
Honest verdict: setup on Windows isn't the blessed path and the skill ecosystem is still thin, but the security foundation is real and worth the friction.
For those further in — what are you actually running day to day, and where does it earn its place over just scripting the same thing?