Repository navigation
OpenClaw 1.2.6
OpenClaw 1.2.6 delivers the governance enforcement fixes from 1.2.5 and adds tokenless npm publication of the exact package artifact validated by CI, with canonical repository metadata for provenance.
Governance-only action: block decisions now use supported native veto boundaries. Observer-only host limitations, raw model evidence, and local mode precedence are preserved. The TypeScript SDK remains pinned to 0.7.6.
Validation: release CI build and 70 offline tests. The npm archive is byte-identical to the CI artifact; registry provenance ties it to this tag and source commit. Native OpenClaw installation and live inference were not run.
Source commit: 9cd75c38085dcae2fc89ea97ea443e14af67b61b.
Changes: #26 and #27.
npm: https://www.npmjs.com/package/@silmaril-security/firewall-plugin/v/1.2.6