Files
openclaw/docs/plugins/reference/policy.md
Gio Della-Libera c85feace54 Policy: add secret and auth conformance checks (#81974)
* feat(policy): add secrets auth conformance

* fix(policy): include sandbox ssh secret data

* fix(policy): complete secret input provenance

* fix(policy): cover media request secrets

* fix(policy): satisfy policy lint

* fix(policy): narrow secret conformance evidence

* fix(policy): cover request bearer token secrets
2026-05-22 12:48:14 -07:00

1.1 KiB

summary, read_when, title
summary read_when title
Adds policy-backed doctor checks for workspace conformance.
You are installing, configuring, or auditing the policy plugin
Policy plugin

Policy plugin

Adds policy-backed doctor checks for workspace conformance.

Distribution

  • Package: @openclaw/policy
  • Install route: included in OpenClaw

Surface

plugin; CLI command: openclaw policy

Behavior

The Policy plugin contributes doctor health checks for policy-managed OpenClaw settings and governed workspace declarations. Policy currently covers channel conformance, governed tool metadata, MCP server posture, model-provider posture, private-network access posture, and OpenClaw config secret provider/auth profile posture.

Policy stores authored requirements in policy.jsonc, observes existing OpenClaw settings and workspace declarations as evidence, and reports drift through openclaw policy check and openclaw doctor --lint. A clean policy check emits policy, evidence, findings, and attestation hashes that operators can record for audit.