mirror of
https://github.com/openclaw/openclaw.git
synced 2026-08-26 09:16:10 +00:00
55263b3dfa
Add exec approvals artifact evidence to Policy.
- add the execApprovals policy namespace and check IDs for required artifact presence, default/per-agent security posture, autoAllowSkills, and allowlist drift
- read the active exec-approvals.json artifact only when execApprovals policy rules are configured, honoring OPENCLAW_STATE_DIR before the default ~/.openclaw path
- emit redacted posture evidence and stable oc:// references without socket tokens, command text, resolved paths, timestamps, or approval-session details
- document the public policy surface and add focused scanner, doctor, conformance, and CLI coverage
Validation:
- GitHub Actions for head
|
||
|---|---|---|
| .. | ||
| acp.md | ||
| agent.md | ||
| agents.md | ||
| approvals.md | ||
| backup.md | ||
| browser.md | ||
| channels.md | ||
| clawbot.md | ||
| commitments.md | ||
| completion.md | ||
| config.md | ||
| configure.md | ||
| crestodian.md | ||
| cron.md | ||
| daemon.md | ||
| dashboard.md | ||
| devices.md | ||
| directory.md | ||
| dns.md | ||
| docs.md | ||
| doctor.md | ||
| flows.md | ||
| gateway.md | ||
| health.md | ||
| hooks.md | ||
| index.md | ||
| infer.md | ||
| logs.md | ||
| mcp.md | ||
| memory.md | ||
| message.md | ||
| migrate.md | ||
| models.md | ||
| node.md | ||
| nodes.md | ||
| onboard.md | ||
| pairing.md | ||
| path.md | ||
| plugins.md | ||
| policy.md | ||
| proxy.md | ||
| qr.md | ||
| reset.md | ||
| sandbox.md | ||
| secrets.md | ||
| security.md | ||
| sessions.md | ||
| setup.md | ||
| skills.md | ||
| status.md | ||
| system.md | ||
| tasks.md | ||
| transcripts.md | ||
| tui.md | ||
| uninstall.md | ||
| update.md | ||
| voicecall.md | ||
| webhooks.md | ||
| wiki.md | ||
| workboard.md | ||