Evidence record / openclaw

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-24-openclaw-tlon-sender-identity-and-hosted-doctor-diagnosis-received-separate-authority-repairs

Tlon sender identity and hosted Doctor diagnosis received separate authority repairs. Tlon group-DM authors are treated as unverified, club-scoped identities rather than trusting an asserted owner name; old pending direct messages without sender provenance require a resend rather than replay. Separately, hosted diagnosis runs Doctor’s read-only lint path because ordinary noninteractive Doctor can migrate state. Current chat setup docs keep Doctor repairs outside the hosted setup chat.

Channel: tagged-release. Half: defect. Date: 2026-10-18.

Operator consequence: Update Tlon Gateways and expect some legacy approval requests to need a fresh message. Keep setup diagnosis separate from permission to repair local state. Both changes reduce authority that a familiar chat or diagnostic label could conceal; neither justifies describing all chat setup as read-only or all Tlon traffic as verified.

Receipt

Finding metadata

Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0

Finding ID: 2026-10-24-openclaw-tlon-sender-identity-and-hosted-doctor-diagnosis-received-separate-authority-repairs

Source links

Primary links, including exact changelog lines when available.

Versioned source: run artifact