Skip to content

runtime-context-policy.md

Latest commit

 

History

History
76 lines (59 loc) · 2.03 KB

runtime-context-policy.md

File metadata and controls

76 lines (59 loc) · 2.03 KB
Raw

Runtime-context contamination policy

This document is generated from the constants in lib/policy.mjs so the documented policy can never drift from the enforced policy. Every gate that writes evidence, attaches artifacts, or pushes a branch fails closed when one of these repo-relative paths would be included.

Denylisted OpenClaw runtime/bootstrap context paths

  • AGENTS.md
  • SOUL.md
  • USER.md
  • TOOLS.md
  • HEARTBEAT.md
  • IDENTITY.md
  • .openclaw/**

Block reports must name only the offending repo-relative paths, never the file contents.

Automatic action classes

  • recheck
  • diagnose
  • diagnose-only
  • notify-escalate
  • repair-rehearsal
  • conflict-artifact
  • auto-safe-repair
  • block

Minor-auto rollout modes

  • observe-only
  • sandbox-proof
  • minor-auto-dry-run
  • minor-auto-live-limited

Fleet target state tiers

  • check-only
  • rehearsal-ready
  • phase-d-ready
  • live-approved-once

Advanced automation lane scopes (default off)

Lane Scope Notes
Phase P auto-merge minor-auto-merge Only proven minor-auto outputs; merge methods: merge, squash, rebase
Phase Q bounded retry bounded-same-scope-retry Max 2 attempts, same scope only
Phase R risky-change approval risky-change-approval One-shot, expiring, packet-prepared

Risk classes, most-risky first (only docs-or-text may pass the auto-merge lane):

  • runtime-bootstrap-context
  • security-auth-config
  • ci-workflow
  • dependency-lockfile
  • semantic-source
  • structured-data
  • unclassified
  • docs-or-text

Key defaults

Constant Value
DEFAULT_ACTION_LEDGER_LIMIT 50 entries
DEFAULT_OBSERVATION_LEDGER_LIMIT 288 entries
DEFAULT_SITUATION_REPORT_EVERY_MS 6h
MIN_LIVE_OPENCLAW_SITUATION_REPORT_EVERY_MS 1h
DEFAULT_REPAIR_REHEARSAL_MAX_AGE_MS 6h
DEFAULT_MINOR_AUTO_POST_PUSH_OBSERVATION_WINDOW_MS 1h