Skip to content
All tags

#exec

2 posts
ai deep-dive Reading the OpenClaw Docs

OpenClaw Nodes in Depth: Approval Binds the Plan, Not the Command You Edited Afterward

The best part of remote node execution is how approval binds: exec prepares a canonical systemRunPlan before approval, and once granted the gateway forwards that stored plan — not any later caller-edited command, cwd, or session fields — and re-validates the working directory before running.

#openclaw#nodes#system-run#exec#approvals#remote-execution
ai guide Reading the OpenClaw Docs

OpenClaw Tools, Part 3: Turning Off the File Tools Does Not Make exec Read-Only

exec is a mutating shell surface: disabling write, edit, and apply_patch does nothing to make it read-only. And since sandboxing is off by default, host=auto actually resolves to the gateway — if you really want the sandbox, say so explicitly and it will at least fail closed.

#openclaw#exec#shell#security#thinking#slash-commands