channel-tools - The LGTM

The LGTM

Sign in Subscribe

channel-tools

A collection of 2 posts

OpenClaw’s Slack Channel-ID Fix Shows Why Name-Based Allowlists Need Runtime Proof

OpenClaw’s Slack Channel-ID Fix Shows Why Name-Based Allowlists Need Runtime Proof

Slack bots are where agent security stops being abstract. A workspace channel looks friendly to humans — #general, #ops, #customer-escalations — but the API cares about channel IDs, account tokens, membership, scopes, and method-specific behavior. OpenClaw PR #95313 fixes a mismatch in that translation layer, and the lesson is broader than Slack:

OpenClaw’s Slack member-info Fix Turns Sender Identity Into a Scoped Runtime Contract

“Default to the current user” is one of those product conveniences that sounds harmless until you ask the only question that matters: current according to whom? That is the identity lesson in OpenClaw PR #89236, a Slack member-info fix merged June 19. The immediate bug is simple. The Slack tool