Josh Avant 0ffcc308f2 Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417) ...

* Secrets: gate exec dry-run resolution behind --allow-exec

* Secrets: fix dry-run completeness and skipped exec audit semantics

* Secrets: require --allow-exec for exec-containing apply writes

* Docs: align secrets exec consent behavior

* Changelog: note secrets exec consent gating

2026-03-17 23:24:34 -05:00

..

security

docs(hooks): clarify trust model and audit guidance

2026-03-17 09:54:30 -07:00

authentication.md

docs: rename onboarding user-facing wizard copy

2026-03-16 19:50:31 -05:00

background-process.md

Exec/ACP: inject OPENCLAW_SHELL into child shell env (#31271)

2026-03-01 20:31:06 -08:00

bonjour.md

fix(security): require explicit trust for first-time TLS pins

2026-02-14 17:55:20 +01:00

bridge-protocol.md

fix(security): harden discovery routing and TLS pins

2026-02-14 17:18:14 +01:00

cli-backends.md

feat(openai): add gpt-5.4 support for API and Codex OAuth (#36590)

2026-03-05 21:01:37 -08:00

configuration-examples.md

docs(image-generation): remove nano banana stock docs

2026-03-17 01:09:58 -07:00

configuration-reference.md

docs(image-generation): document implicit tool enablement

2026-03-17 09:23:35 -07:00

configuration.md

docs(image-generation): remove nano banana stock docs

2026-03-17 01:09:58 -07:00

discovery.md

fix(security): require explicit trust for first-time TLS pins

2026-02-14 17:55:20 +01:00

doctor.md

Browser: support non-Chrome existing-session profiles via userDataDir (#48170)

2026-03-16 14:21:22 +01:00

gateway-lock.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

health.md

fix(ci): config drift found and documented

2026-03-15 10:43:03 -07:00

heartbeat.md

Heartbeat: add isolatedSession option for fresh session per heartbeat run (#46634)

2026-03-14 16:28:01 -07:00

index.md

docs(secrets): add dedicated apply plan contract page

2026-02-26 14:47:22 +00:00

local-models.md

docs: restore onboard docs references

2026-03-16 05:50:57 +00:00

logging.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

multiple-gateways.md

docs: restore onboard docs references

2026-03-16 05:50:57 +00:00

network-model.md

fix(gateway): harden canvas auth with session capabilities

2026-02-19 15:51:22 +01:00

openai-http-api.md

docs(gateway): clarify trusted operator HTTP endpoints

2026-03-07 18:48:17 +00:00

openresponses-http-api.md

docs(gateway): clarify URL allowlist semantics

2026-03-17 00:03:27 -07:00

pairing.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

protocol.md

fix(gateway): harden token fallback/reconnect behavior and docs (#42507)

2026-03-10 17:05:57 -05:00

remote-gateway-readme.md

refactor: replace bot.molt identifiers with ai.openclaw

2026-02-25 05:03:24 +00:00

remote.md

Gateway: fail closed unresolved local auth SecretRefs (#42672)

2026-03-10 21:41:56 -05:00

sandbox-vs-tool-policy-vs-elevated.md

chore: Run pnpm format:fix.

2026-01-31 21:13:13 +09:00

sandboxing.md

test: expand ssh sandbox coverage and docs

2026-03-15 21:38:22 -07:00

secrets-plan-contract.md

Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417)

2026-03-17 23:24:34 -05:00

secrets.md

Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417)

2026-03-17 23:24:34 -05:00

tailscale.md

fix(gateway): scope tailscale tokenless auth to websocket

2026-02-21 13:03:13 +01:00

tools-invoke-http-api.md

fix: classify /tools/invoke errors and sanitize 500s (#13185) (thanks @davidrudduck)

2026-02-13 16:58:30 +01:00

troubleshooting.md

!refactor(browser): remove Chrome extension path and add MCP doctor migration (#47893)

2026-03-15 23:56:08 -07:00

trusted-proxy-auth.md

docs: refresh CLI and trusted-proxy docs

2026-02-25 02:40:12 +00:00