Finding / openclaw

2026-10-13-openclaw-authority-inspection-and-in-chat-approvals-became-easier-to-use

Authority inspection and in-chat approvals became easier to use. 9.7 adds exec-policy show to explain terminal-tool policy and approval sources, a plain-language connection Profile view, and structured change approvals completed in the chat that requested them. 10.1 adds scope to the standalone approval page, which previously showed command and host without payment details or standing-grant terms carried by the request. Current docs still offer sender tool policy, per-agent message restrictions and exact-operation standing grants for the named automation path. Standing grants bind the agent, job definition and operation and are rechecked before spawn. One Gateway is one trust domain; these collaboration controls are not hostile-tenant isolation.

Channel: tagged-release. Half: capability. Date: 2026-09-23 (9.6), 2026-09-30 (9.7), 2026-10-10 (10.1).

Operator consequence: Use openclaw exec-policy show --agent <id> --session <existing-session-key> --verbose for a read-only live Gateway preview. Without session, the command is offline policy inspection and locally allowed execution is unverified. Even a successful preview can be cached and does not guarantee execution; model, channel, sandbox and runtime checks may still deny it. Keep unrelated trust domains on separate Gateways and approve notification requests on a build with the scope display fix.

Receipt

Finding metadata

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-openclaw-authority-inspection-and-in-chat-approvals-became-easier-to-use

Profile citations

  • OpenClaw / claim / authority-inspection-and-chat-approvals
  • OpenClaw / posture / accessibility

Source links

Primary links, including exact changelog lines when available.