OpenClaw's Node for VS Code extension proved it can support a real local file-based workflow, but on Windows the experience still feels more like early infrastructure than finished tooling.

Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.