The most honest thing about OpenClaw issue #81775 is that both sides of the bug are defensible. A WebSocket client authenticates with the configured shared gateway token, requests operator read scopes, and successfully connects. Then the gateway returns payload.auth.scopes: [], which means every useful observability subscription fails with missing