Approvals

Risky shell and browser actions stay on the gateway tool gate in ask mode — fail-closed.

Pending approvals are listed from OpenClaw and resolved allow-once or deny. The page never offers allow-always unless the pending record includes it. Plugin approval unavailable on a CLI turn fails closed.

Owner approval rules API: list/add/delete/test under /open-bot/computer/approval-rules. Audit log is append-only and redacted.