1.2.11

OpenClaw classification now has a plugin-owned deadline that covers SDK retries and response bodies. Authored hook budgets leave room for that deadline to fail open before the host timeout. Near-deadline policy decisions remain enforceable.

Use openclaw plugins install npm:@silmaril-security/firewall-plugin@1.2.11 for the immutable npm release. Retained host support starts at2026.8.2; current qualification uses2026.11.2. Consumer macOS bundle propagation is tracked separately.

Validation:85tests, real current-host gate runner, floor/current linked and archive loading, and exact registry bundle SHA256 6c565b09020364f89b3a67fc6705fc08498610298779f73267fa54adf04effcf.

Source: a05a0d0dc1f8d39161717af7b1c01dca53d05cc0. Trusted npm provenance: https://github.com/Silmaril-Security/FirewallPlugin/actions/runs/42683382183.

OpenClaw FirewallPlugin v1.2.10

Ship canonical SDK0.8.2 governance resources and consistent OpenClaw plugin attribution. Existing native hook behavior, deadlines, fail-open handling and redacted evidence contracts are retained.

Install the npm package at the exact version after registry verification, following the repository setup guide. Existing tags and registry packages remain immutable.

Validation: exact-head Greptile5/5,77 unit tests, clean production dependency audit, deterministic tracked bundle and inspected packed payload.

Source: 3991872c05f43cfaf5b213a844b51a4d1e26eafa.

OpenClaw Firewall plugin 1.2.8

Preserve the user_input evidence boundary for before_prompt_build warnings so macOS can attribute the report to Before agent input. Warning delivery and plugin-reported evidence truth remain unchanged.

Correct npm, GitHub tag and archive install instructions to this release and add version-consistency coverage.

Validation: 72 offline unit tests and the built package. Installed OpenClaw/macOS uptake was not exercised.

Source: #30

OpenClaw 1.2.7

The packaged timeout guide now matches OpenClaw's host manifest: timeoutMs accepts JSON integers from 250 through 10000 milliseconds, with 2500 used when omitted. Numeric strings, fractions and out-of-range values are rejected by the host.

Package and runtime provenance identify version 1.2.7. No runtime or enforcement behavior changed.

Validation: 70 offline tests and build passed. npm publication uses the existing immutable-tag trusted-publishing workflow and publishes the validated tarball with provenance.

Source: #29
Exact merged commit: 7967d90f76752eaa2539bae06f492a5948692eb6

OpenClaw 1.2.6

OpenClaw 1.2.6 delivers the governance enforcement fixes from 1.2.5 and adds tokenless npm publication of the exact package artifact validated by CI, with canonical repository metadata for provenance.

Governance-only action: block decisions now use supported native veto boundaries. Observer-only host limitations, raw model evidence, and local mode precedence are preserved. The TypeScript SDK remains pinned to 0.7.6.

Validation: release CI build and 70 offline tests. The npm archive is byte-identical to the CI artifact; registry provenance ties it to this tag and source commit. Native OpenClaw installation and live inference were not run.

Source commit: 9cd75c38085dcae2fc89ea97ea443e14af67b61b.
Changes: #26 and #27.

npm: https://www.npmjs.com/package/@silmaril-security/firewall-plugin/v/1.2.6

OpenClaw 1.2.5

Honor governance-only block decisions at supported native veto boundaries and preserve observer-only host limits, raw model evidence and local mode precedence. Pins published TypeScript SDK 0.7.6.

Validation: build and 70 offline tests; tracked entry bundle rebuilt. No native installation or inference. Attached package archive is available independently of npm; npm publication is pending supported CI provenance.

Source: #26
Exact merged commit: 819b6637a9519dd10232f907bba62a9a64badc23

OpenClaw Firewall Plugin v1.2.4

Mac Computer Name provenance

This release adds optional metadata.silmaril.provenance.device_name to Mac-originated classification requests. endpoint_id remains the stable identity. The name is trimmed and bounded, and classification continues if macOS cannot provide it. Historical traces retain the name captured with their request.

Feature PR: #23
Version PR: #24

The installable tarball is attached to this release and published to npm as @silmaril-security/firewall-plugin@1.2.4.

v1.2.3

Publishes the OpenClaw Firewall Plugin from Silmaril Security owned npm scope as @silmaril-security/firewall-plugin@1.2.3.

OpenClaw Firewall Plugin v1.2.2

Corrects protection evidence for OpenClaw tool-result boundaries: malicious results are classified, but the current host cannot synchronously replace them, so Block mode now reports the boundary as unenforced instead of protected. Adds canonical public npm release metadata.