Skip to content

fix: tighten OpenClaw trust signals and setup coherence#278

Merged
peg merged 7 commits intostagingfrom
fix/openclaw-coherence-trust
Apr 29, 2026
Merged

fix: tighten OpenClaw trust signals and setup coherence#278
peg merged 7 commits intostagingfrom
fix/openclaw-coherence-trust

Conversation

@peg
Copy link
Copy Markdown
Owner

@peg peg commented Apr 28, 2026

Summary

  • fix false OpenClaw "protected" signals by requiring the native plugin to be installed, allowed, and enabled before reporting active protection
  • align setup openclaw, status, doctor, quickstart, and docs around the native-plugin-first integration story
  • sync stale OpenClaw docs/artifacts and add coverage for the new warning/detection paths

Why

This minor is supposed to be a clarity/coherence release. Before this branch, Rampart could imply OpenClaw was protected when only the plugin directory existed, and several public surfaces still told conflicting stories about rampart setup openclaw, serve requirements, and legacy patching.

Changes

  • add getOpenClawPluginState() and require installed + allowed + enabled for active plugin detection
  • make quickstartHooksConfigured("openclaw") and detectProtectedAgents() stop treating plugin-dir existence as sufficient
  • update setup openclaw CLI help to describe the native plugin path as the default on current OpenClaw builds
  • keep doctorOpenClawPlugin() fail-honest when config cannot be verified
  • sync OpenClaw wording across README, threat model, docs pages, support matrix, and generated site artifacts
  • add tests for:
    • OpenClaw plugin detection and trust-state behavior
    • isHookBasedOnly() / status-path behavior
    • doctorOpenClawPlugin() warning branches
    • Codex wrapper setup/detection smoke-level coverage

Validation

Linux

  • go test ./... -count=1
  • go build ./cmd/rampart
  • go test ./cmd/rampart/cli -count=1
  • targeted Codex setup/detection tests

macOS

  • go test ./cmd/rampart/cli -count=1
  • go test ./internal/openclaw/... ./internal/bridge ./internal/proxy -count=1
  • targeted Codex setup/detection tests
  • go build ./cmd/rampart

Scope note

This is intentionally a trust/coherence pass, not a feature expansion. I would keep this as the release-line candidate for the next minor before 1.0.0-rc1.

peg and others added 7 commits April 26, 2026 18:22
@peg
release: v0.9.20 (#277)
c580cd8 
* fix: harden agent integration checks (#261)

* fix: harden agent integration checks

* fix: require preload library before codex wrapper

* fix: make codex wrapper setup idempotent

* test: handle macos codex path canonicalization

* docs: align platform integration behavior

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: polish integration platform guidance (#262)

Co-authored-by: clap [bot] <clap@rampart.sh>

* chore: prepare v0.9.19 release notes (#263)

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: refresh rampart landing page (#265)

* docs: refresh rampart landing page

* docs: deepen landing page SEO and visuals

* docs: overhaul landing page hero and sections

* docs: replace generated feature cards with product mechanics

* docs: soften landing page origin note

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: update deployed landing page source on staging (#269)

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: polish rampart landing page (#270)

Co-authored-by: clap [bot] <clap@rampart.sh>

* fix: preserve modified built-in policy profiles (#273)

* fix: preserve modified built-in policy profiles

* fix: clarify built-in policy drift detection

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* fix: harden OpenClaw approval fallback behavior (#275)

* harden openclaw approval handling

* test: isolate proxy HOME state

* fix: make allow-always writeback more robust on windows

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: tighten README and landing page voice (#274)

Co-authored-by: clap [bot] <clap@rampart.sh>

* chore: prepare v0.9.20 release notes (#276)

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: sync deployed landing page source with canonical page

---------

Co-authored-by: clap [bot] <clap@rampart.sh>
fix: tighten openclaw setup trust signals
373f7ff
test: cover openclaw plugin doctor warnings
177cbfa
Merge remote-tracking branch 'origin/staging' into fix/openclaw-coher…
03eff87 
…ence-trust

# Conflicts:
#	CHANGELOG.md
fix: tighten trust signals and self-mod policy
4c8960d
docs: align OpenClaw approval guide
bd0069c
docs: tidy support matrix placement
64537b7
@peg peg merged commit 2682a12 into staging Apr 29, 2026
4 checks passed
This was referenced Apr 29, 2026
Merged
Merged
peg added a commit that referenced this pull request Apr 29, 2026
@peg
release: v0.9.21 (#280)
ef6f87a 
* fix: harden agent integration checks (#261)

* fix: harden agent integration checks

* fix: require preload library before codex wrapper

* fix: make codex wrapper setup idempotent

* test: handle macos codex path canonicalization

* docs: align platform integration behavior

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: polish integration platform guidance (#262)

Co-authored-by: clap [bot] <clap@rampart.sh>

* chore: prepare v0.9.19 release notes (#263)

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: refresh rampart landing page (#265)

* docs: refresh rampart landing page

* docs: deepen landing page SEO and visuals

* docs: overhaul landing page hero and sections

* docs: replace generated feature cards with product mechanics

* docs: soften landing page origin note

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: update deployed landing page source on staging (#269)

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: polish rampart landing page (#270)

Co-authored-by: clap [bot] <clap@rampart.sh>

* fix: preserve modified built-in policy profiles (#273)

* fix: preserve modified built-in policy profiles

* fix: clarify built-in policy drift detection

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* fix: harden OpenClaw approval fallback behavior (#275)

* harden openclaw approval handling

* test: isolate proxy HOME state

* fix: make allow-always writeback more robust on windows

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: tighten README and landing page voice (#274)

Co-authored-by: clap [bot] <clap@rampart.sh>

* chore: prepare v0.9.20 release notes (#276)

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: sync deployed landing page source with canonical page

* fix: tighten OpenClaw trust signals and setup coherence (#278)

* release: v0.9.20 (#277)

* fix: harden agent integration checks (#261)

* fix: harden agent integration checks

* fix: require preload library before codex wrapper

* fix: make codex wrapper setup idempotent

* test: handle macos codex path canonicalization

* docs: align platform integration behavior

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: polish integration platform guidance (#262)

Co-authored-by: clap [bot] <clap@rampart.sh>

* chore: prepare v0.9.19 release notes (#263)

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: refresh rampart landing page (#265)

* docs: refresh rampart landing page

* docs: deepen landing page SEO and visuals

* docs: overhaul landing page hero and sections

* docs: replace generated feature cards with product mechanics

* docs: soften landing page origin note

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: update deployed landing page source on staging (#269)

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: polish rampart landing page (#270)

Co-authored-by: clap [bot] <clap@rampart.sh>

* fix: preserve modified built-in policy profiles (#273)

* fix: preserve modified built-in policy profiles

* fix: clarify built-in policy drift detection

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* fix: harden OpenClaw approval fallback behavior (#275)

* harden openclaw approval handling

* test: isolate proxy HOME state

* fix: make allow-always writeback more robust on windows

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: tighten README and landing page voice (#274)

Co-authored-by: clap [bot] <clap@rampart.sh>

* chore: prepare v0.9.20 release notes (#276)

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: sync deployed landing page source with canonical page

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* fix: tighten openclaw setup trust signals

* test: cover openclaw plugin doctor warnings

* fix: tighten trust signals and self-mod policy

* docs: align OpenClaw approval guide

* docs: tidy support matrix placement

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* chore: prepare v0.9.21 release notes (#279)

Co-authored-by: clap [bot] <clap@rampart.sh>

---------

Co-authored-by: clap [bot] <clap@rampart.sh>
peg added a commit that referenced this pull request Apr 30, 2026
@peg
release: promote staging to main for v0.9.22 (#287)
82aaeb1 
* fix: harden agent integration checks (#261)

* fix: harden agent integration checks

* fix: require preload library before codex wrapper

* fix: make codex wrapper setup idempotent

* test: handle macos codex path canonicalization

* docs: align platform integration behavior

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: polish integration platform guidance (#262)

Co-authored-by: clap [bot] <clap@rampart.sh>

* chore: prepare v0.9.19 release notes (#263)

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: refresh rampart landing page (#265)

* docs: refresh rampart landing page

* docs: deepen landing page SEO and visuals

* docs: overhaul landing page hero and sections

* docs: replace generated feature cards with product mechanics

* docs: soften landing page origin note

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: update deployed landing page source on staging (#269)

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: polish rampart landing page (#270)

Co-authored-by: clap [bot] <clap@rampart.sh>

* fix: preserve modified built-in policy profiles (#273)

* fix: preserve modified built-in policy profiles

* fix: clarify built-in policy drift detection

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* fix: harden OpenClaw approval fallback behavior (#275)

* harden openclaw approval handling

* test: isolate proxy HOME state

* fix: make allow-always writeback more robust on windows

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: tighten README and landing page voice (#274)

Co-authored-by: clap [bot] <clap@rampart.sh>

* chore: prepare v0.9.20 release notes (#276)

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: sync deployed landing page source with canonical page

* fix: tighten OpenClaw trust signals and setup coherence (#278)

* release: v0.9.20 (#277)

* fix: harden agent integration checks (#261)

* fix: harden agent integration checks

* fix: require preload library before codex wrapper

* fix: make codex wrapper setup idempotent

* test: handle macos codex path canonicalization

* docs: align platform integration behavior

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: polish integration platform guidance (#262)

Co-authored-by: clap [bot] <clap@rampart.sh>

* chore: prepare v0.9.19 release notes (#263)

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: refresh rampart landing page (#265)

* docs: refresh rampart landing page

* docs: deepen landing page SEO and visuals

* docs: overhaul landing page hero and sections

* docs: replace generated feature cards with product mechanics

* docs: soften landing page origin note

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: update deployed landing page source on staging (#269)

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: polish rampart landing page (#270)

Co-authored-by: clap [bot] <clap@rampart.sh>

* fix: preserve modified built-in policy profiles (#273)

* fix: preserve modified built-in policy profiles

* fix: clarify built-in policy drift detection

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* fix: harden OpenClaw approval fallback behavior (#275)

* harden openclaw approval handling

* test: isolate proxy HOME state

* fix: make allow-always writeback more robust on windows

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: tighten README and landing page voice (#274)

Co-authored-by: clap [bot] <clap@rampart.sh>

* chore: prepare v0.9.20 release notes (#276)

Co-authored-by: clap [bot] <clap@rampart.sh>

* docs: sync deployed landing page source with canonical page

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* fix: tighten openclaw setup trust signals

* test: cover openclaw plugin doctor warnings

* fix: tighten trust signals and self-mod policy

* docs: align OpenClaw approval guide

* docs: tidy support matrix placement

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

* chore: prepare v0.9.21 release notes (#279)

Co-authored-by: clap [bot] <clap@rampart.sh>

* fix: harden config resolution and hook approval integrity (#286)

* ci: migrate workflows to Node 24-safe actions

* fix: harden cli config resolution and hook failure handling

* test: harden config parsing and ask-failure regressions

* docs: polish config semantics and api override flows

* fix: finalize rc hardening and release polish

---------

Co-authored-by: clap [bot] <clap@rampart.sh>

---------

Co-authored-by: clap [bot] <clap@rampart.sh>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@peg