mirror of
https://github.com/openclaw/openclaw.git
synced 2026-08-03 12:31:35 +00:00
edecdbd05e
* refactor(config): consolidate media model lists * refactor(config): unify memory configuration * refactor(config): consolidate TTS ownership * refactor(config): move typing policy to agents * refactor(config): retire product-level config surfaces * refactor(config): share scoped tool policy type * chore(config): refresh generated baselines * fix(config): honor agent typing overrides * fix(config): migrate sibling config consumers * refactor(infra): keep base64url decoder private * fix(config): strip invalid legacy TTS values * chore(config): refresh rebased baseline hash * fix(doctor): route legacy messages.tts.realtime voice to talk during tts move * refactor(config): polish final layout names * refactor(config): freeze retired tuning defaults * feat(config): add fast mode default symmetry * refactor(config): key agent entries by id * docs(config): update final layout reference * test(config): cover final layout migrations * chore(config): refresh final layout baselines * fix(config): align final layout runtime readers * fix(config): align remaining readers * fix(config): stabilize final layout migrations * fix(config): finalize config projection proof * fix(config): address final layout review * docs(release): preserve historical config names * fix(config): complete keyed agent migration * fix(config): close final migration gaps * fix(config): finish full-branch review * fix(config): complete runtime secret detection * fix(config): close final review findings * fix(config): finish canonical docs and heartbeat migration * fix(config): integrate latest main after rebase * refactor(env): isolate test-only controls * refactor(env): isolate build and development controls * refactor(env): collapse process identity indirection * refactor(env): remove duplicate config and temp aliases * docs(env): define the operator-facing allowlist * ci(env): ratchet production variable count * fix(env): remove stale provider helper import * fix(env): make ratchet sorting explicit * test(env): keep test seam in dead-code audit * test(env): cover ratchet growth and boundary; document surface budgets * docs(config): document tier-eval consolidations * docs(config): clarify speech preference ownership * test(memory): align retired tuning fixtures * refactor(memory): freeze engine heuristics * refactor(config): apply tier-eval tranche * refactor(tts): move persona shaping to providers * refactor(compaction): move prompt policy to providers * test(config): align hookified prompt fixtures * chore(deadcode): classify test-only exports * chore(github): remove unused spawn helper * chore(deadcode): classify queue diagnostics * chore(deadcode): remove unused lane snapshot export * chore(plugin-sdk): ratchet consolidated surface * fix(config): integrate latest main after rebase
80 lines
3.4 KiB
Markdown
80 lines
3.4 KiB
Markdown
---
|
|
summary: "Adds policy-backed doctor checks for workspace conformance."
|
|
read_when:
|
|
- You are installing, configuring, or auditing the policy plugin
|
|
title: "Policy plugin"
|
|
---
|
|
|
|
# Policy plugin
|
|
|
|
Adds policy-backed doctor checks for workspace conformance.
|
|
|
|
## Distribution
|
|
|
|
- Package: `@openclaw/policy`
|
|
- Install route: included in OpenClaw
|
|
|
|
## Surface
|
|
|
|
plugin
|
|
|
|
<!-- openclaw-plugin-reference:manual-start -->
|
|
|
|
## Behavior
|
|
|
|
The Policy plugin contributes doctor health checks for policy-managed OpenClaw
|
|
settings and governed workspace declarations. Policy currently covers channel
|
|
conformance, governed tool metadata, MCP server posture, model-provider posture,
|
|
private-network access posture, Gateway exposure posture, agent workspace/tool
|
|
posture, configured global/per-agent tool posture, configured sandbox runtime
|
|
posture, ingress/channel access posture, data-handling posture, and OpenClaw config secret
|
|
provider/auth profile posture.
|
|
|
|
Policy stores authored requirements in `policy.jsonc`, observes existing
|
|
OpenClaw settings and workspace declarations as evidence, and reports drift
|
|
through `openclaw policy check` and `openclaw doctor --lint`. A clean policy
|
|
check emits policy, evidence, findings, and attestation hashes that operators
|
|
can record for audit.
|
|
|
|
`openclaw policy compare --baseline <file>` compares one policy file to another
|
|
policy file. It is config-level conformance only: it uses policy rule metadata
|
|
to verify that the checked policy is not missing or weaker than the authored
|
|
baseline, and it does not inspect runtime state, credentials, or secret values.
|
|
|
|
Tool posture rules can require approved profiles, workspace-only filesystem
|
|
tools, bounded exec security/ask/host settings, disabled elevated mode, exact
|
|
`alsoAllow` entries, and required tool deny entries. The evidence records
|
|
additive `alsoAllow` entries because they can widen effective tool posture.
|
|
These checks observe config conformance only; they do not read runtime approval
|
|
state or add runtime enforcement.
|
|
|
|
Sandbox posture rules can require approved sandbox modes/backends, deny host
|
|
container networking, deny container namespace joins, require read-only container
|
|
mounts, deny container runtime socket mounts and unconfined container profiles,
|
|
and require sandbox browser CDP source ranges.
|
|
These checks observe config conformance only; they do not read runtime approval
|
|
state, inspect live containers, or add runtime enforcement.
|
|
|
|
Data-handling rules can require sensitive logging redaction, deny telemetry
|
|
content capture, require session retention maintenance, and deny session
|
|
transcript memory indexing. These checks observe config conformance only; they
|
|
do not inspect raw logs, telemetry exports, transcripts, memory files, secrets,
|
|
or personal data.
|
|
|
|
Named policy scopes under `scopes.<scopeName>` can add stricter normal policy
|
|
sections for the selector they list. `agentIds` supports `tools`,
|
|
`agents.workspace`, `sandbox`, and `dataHandling.memory`; `channelIds` supports
|
|
`ingress.channels`.
|
|
Runtime agent ids that are not explicitly listed in `agents.entries.*` are checked
|
|
against inherited global/default posture rather than silently passing with no
|
|
evidence. Every scope present in `policy.jsonc` must be valid and enforceable
|
|
for its selector. Overlay rules are additional claims, so they do not weaken
|
|
top-level policy and can produce their own findings when the same observed
|
|
config violates both scopes.
|
|
|
|
<!-- openclaw-plugin-reference:manual-end -->
|
|
|
|
## Related docs
|
|
|
|
- [policy](/cli/policy)
|