Gio Della-Libera cbf72e5e26 feat(policy): add channel conformance checks (#80407) ...

Summary:
- Add the bundled Policy plugin with policy-backed doctor checks for channel conformance.
- Add `openclaw policy check` attestations, accepted-attestation drift checks, and opt-in doctor repair.
- Add policy CLI docs, generated plugin inventory/reference docs, and changelog credit.

Verification:
- node --import tsx scripts/sync-plugin-versions.ts --check
- pnpm plugins:inventory:check
- pnpm docs:list
- git diff --check origin/main..HEAD
- node scripts/run-vitest.mjs extensions/policy/src/policy-state.test.ts extensions/policy/src/cli.test.ts extensions/policy/src/doctor/register.test.ts src/flows/bundled-health-checks.test.ts src/cli/program/register.maintenance.test.ts
- codex review --uncommitted; accepted finding fixed, reran clean
- codex review --commit HEAD
- GitHub CI for 4e09b067f4: CI, Workflow Sanity, CodeQL, CodeQL Critical Quality, OpenGrep PR Diff, Real behavior proof, Dependency Change Awareness all green; reran failed Windows Node setup job successfully

Co-authored-by: Gio Della-Libera <giodl73@gmail.com>
Co-authored-by: Gio Della-Libera <giodl@microsoft.com>

2026-05-20 11:50:21 +01:00

..

acp.md

feat(acp): expose session lineage metadata

2026-05-11 18:32:46 +01:00

agent.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

agents.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

approvals.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

backup.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

browser.md

feat(browser): add evaluate timeout CLI option (#83696)

2026-05-18 17:30:33 +00:00

channels.md

fix: add channel status filtering (#80706)

2026-05-11 18:44:54 +01:00

clawbot.md

…

commitments.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

completion.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

config.md

fix(config): add --dry-run support to unset (#81895)

2026-05-16 11:09:42 -07:00

configure.md

fix: harden gateway launchd and configure sections

2026-05-17 03:44:05 +01:00

crestodian.md

Remove codex-cli backend and migrate to Codex runtime

2026-05-14 10:07:18 +01:00

cron.md

fix(cron): use structured denial signals (#84311)

2026-05-20 00:49:49 +00:00

daemon.md

docs(cli): document plugin-aware deep status warnings on gateway/daemon

2026-05-11 07:44:13 +08:00

dashboard.md

fix(dashboard): guide manual token auth fallback

2026-05-04 18:39:25 -05:00

devices.md

fix(auth): align operator bootstrap scopes

2026-05-11 14:14:33 -05:00

directory.md

docs: typography hygiene across 9 pages (cli/channels)

2026-05-06 08:55:00 -07:00

dns.md

docs(cli): fix smart apostrophes in dns and health

2026-05-06 00:23:48 -07:00

docs.md

fix(docs): use lowercase MCP search tool (#82704)

2026-05-16 21:21:58 +01:00

doctor.md

fix(doctor): archive legacy clawd browser profile residue (#83230)

2026-05-17 19:45:03 -07:00

flows.md

docs(cli): expand docs and tasks-flow CLI references with verified options

2026-05-10 22:17:42 +08:00

gateway.md

fix(gateway): expose runtime version in gateway status

2026-05-19 22:09:14 -07:00

health.md

docs(cli): rewrite voicecall and tighten setup/health with code-verified options

2026-05-10 22:41:38 +08:00

hooks.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

index.md

feat(policy): add channel conformance checks (#80407)

2026-05-20 11:50:21 +01:00

infer.md

fix: route image URL describes through MiniMax VLM

2026-05-17 08:45:50 +01:00

logs.md

feat(cli/logs): announce --follow gateway reconnect and add JSON notice parity (#75372)

2026-05-03 17:55:58 +08:00

mcp.md

fix(codex): scope user MCP servers by agent (#82180)

2026-05-15 20:17:16 +01:00

memory.md

Fix memory plugin CLI help dispatch (#83841)

2026-05-18 20:35:55 -05:00

message.md

fix(nextcloud-talk): dispatch react action so agents can send reactions (#70110) (#72348)

2026-05-18 18:54:44 +00:00

migrate.md

docs: clarify Codex home isolation

2026-05-14 06:51:57 +01:00

models.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

node.md

feat: add native mac dashboard window

2026-05-16 23:49:18 +01:00

nodes.md

refactor: move canvas to plugin surfaces

2026-05-07 09:07:18 +01:00

onboard.md

feat: add native mac dashboard window

2026-05-16 23:49:18 +01:00

pairing.md

docs: typography hygiene across 9 pages (cli/channels)

2026-05-06 08:55:00 -07:00

path.md

OC Path: restore YAML support (#81436)

2026-05-16 07:52:08 -07:00

plugins.md

docs: add tool plugin authoring guide

2026-05-17 11:45:18 +01:00

policy.md

feat(policy): add channel conformance checks (#80407)

2026-05-20 11:50:21 +01:00

proxy.md

Support HTTPS managed proxy CA trust (#79171)

2026-05-17 06:23:30 +01:00

qr.md

[codex] restore QR bootstrap operator handoff (#83684)

2026-05-19 20:59:09 +03:00

reset.md

…

sandbox.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

secrets.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

security.md

Add security audit suppressions (#76949)

2026-05-16 22:57:04 +01:00

sessions.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

setup.md

docs(cli): fix setup.md options table mangled by formatter on pipe char

2026-05-10 22:41:39 +08:00

skills.md

feat(cli): support installing skills to shared global directory via --global (#83705)

2026-05-18 17:22:00 +00:00

status.md

fix: clarify update warning states

2026-05-11 18:02:05 +01:00

system.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

tasks.md

fix(tasks): report cron session preserves from locked store

2026-05-09 20:05:07 -04:00

tui.md

docs: rewrite 3 pages with code-verified options and Mintlify funnel

2026-05-10 22:31:10 +08:00

uninstall.md

…

update.md

fix: surface update restart and plugin repair guidance

2026-05-15 07:32:29 +01:00

voicecall.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

webhooks.md

docs: rewrite 3 pages with code-verified options and Mintlify funnel

2026-05-10 22:31:10 +08:00

wiki.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00