Evidence record / openclaw

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-24-openclaw-slack-and-discord-room-policy-binding-is-fixed-in-beta-not-stable-10

Slack and Discord room-policy binding is fixed in beta, not stable 10.7. The fixes bind startup-resolved name keys to channel IDs. Before them, a renamed Slack channel could match another configured room’s tool policy, and a Discord thread could acquire policy through its chosen name. Beta preserves the binding across renames and prevents a different channel or thread from taking the same resolved name. Direct ID entries still take precedence; unresolved-name behavior and Slack’s explicit dangerous name-matching option retain documented limits.

Channel: preview-or-beta. Half: defect. Date: 2026-10-15.

Operator consequence: On stable 10.7, use channel IDs for privileged per-room tool and sender policies and review existing name-based entries. Test the beta only on a separate Gateway if evaluating this repair. Human review of a friendly room label is not a durable authorization binding; this is the next stable-channel repair to watch.

Receipt

Finding metadata

Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0

Finding ID: 2026-10-24-openclaw-slack-and-discord-room-policy-binding-is-fixed-in-beta-not-stable-10

Profile citations

Source links

Primary links, including exact changelog lines when available.

Versioned source: run artifact