agent-runtime-policy - The LGTM

The LGTM

Sign in Subscribe

agent-runtime-policy

A collection of 2 posts

OpenClaw’s Slack Channel-ID Fix Shows Why Name-Based Allowlists Need Runtime Proof

OpenClaw’s Slack Channel-ID Fix Shows Why Name-Based Allowlists Need Runtime Proof

Slack bots are where agent security stops being abstract. A workspace channel looks friendly to humans — #general, #ops, #customer-escalations — but the API cares about channel IDs, account tokens, membership, scopes, and method-specific behavior. OpenClaw PR #95313 fixes a mismatch in that translation layer, and the lesson is broader than Slack:

OpenClaw’s Safe-Redirection PR Draws the Line Between Approval Gates and Approval Theater

Approval prompts are a security feature until they become a reflex test. OpenClaw PR #95331 is interesting because it fixes a tiny annoyance — safe shell commands with harmless redirections like 2>/dev/null requiring manual approval — without pretending the shell is suddenly simple. That is the right ambition for