Evidence record / openclaw
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-24-openclaw-headless-agent-exec-dispatches-blocking-policy-hooks-from-stable-10
Headless agent exec dispatches blocking policy hooks from stable 10.5. Headless openclaw agent exec could load a scoped plugin registry without creating the process-wide hook runner, silently skipping a blocking before_tool_call plugin. Stable initializes the runner even without a process registry root; dispatch still reads the live scoped registry. This repairs a missing enforcement path, distinct from final-argument binding after approval. The commit includes attributed end-to-end probes; none was rerun here.
Channel: tagged-release. Half: defect. Date: 2026-10-18.
Operator consequence: Upgrade headless policy-plugin hosts to 10.7 and test the actual openclaw agent exec entry point with a harmless denied operation. A policy-plugin check through the Gateway alone does not establish that standalone dispatch works.
Receipt
Finding metadata
Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0
Finding ID: 2026-10-24-openclaw-headless-agent-exec-dispatches-blocking-policy-hooks-from-stable-10
Source links
Primary links, including exact changelog lines when available.
- commit2026-10-24-openclaw-headless-agent-exec-dispatches-blocking-policy-hooks-from-stable-10github.com/openclaw/openclaw/commit/f33247464b02bd0bd04a215158a24150ac1f003atagged commit file2026-10-24-openclaw-headless-agent-exec-dispatches-blocking-policy-hooks-from-stable-10openclaw/openclaw / src/agents/runtime-plugins.tstagged commit file2026-10-24-openclaw-headless-agent-exec-dispatches-blocking-policy-hooks-from-stable-10openclaw/openclaw / src/plugins/hook-runner-global.ts
Versioned source: run artifact