Repository navigation
OpenClaw, Hermes, and OpenCode can ask their paired Iris contact for permission. Use Reply on the specific prompt and type allow once or deny. OpenClaw also offers always allow when it can bind the grant to the displayed command, arguments, and folder.
The plugins check the quoted prompt against their sent-message history and the host's pending request. A bare decision, an ambiguous quote, or a reply to an expired request grants no permission.
Verified with OpenClaw 2026.10.9, Hermes 0.22.5, and OpenCode 1.19.5. The OpenCode test exchanged encrypted messages between disposable Iris accounts. ClawHub Plugin Inspector reported zero findings. Source commit 86ac4f4.