Skip to content

Rampart 1.8.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Sep 02:22
· 161 commits to main since this release
v1.8.1
269a69f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Rampart 1.8.1 is a maintenance and security release for OpenClaw compatibility, approval integrity, and command-policy enforcement.

Fixes

  • Follow current OpenClaw install/enable consent requirements, repair disabled managed plugin state, preserve explicit execution mode and unrelated configuration, and roll back rejected reinstallation.
  • Keep complete redacted action review connected to immutable retry identity across API, dashboard, CLI and durable approval state.
  • Correlate supported literal download destinations with execution operands in the same represented command. This does not track activity across separate calls or analyze arbitrary program effects.
  • Use Go 1.26.8 and correct audit-integrity, support and host-failure claims.

Upgrade notes

  • Upgrade and restart the Rampart policy service and bundled OpenClaw plugin together. Run rampart protect openclaw, then check the configured installation with rampart verify openclaw and rampart doctor.
  • Native OpenClaw approvals now offer allow once and deny. The full escaped, redacted review must fit the host's 512-character description limit; oversized or unavailable review blocks before approval creation. Persistent allowances require explicit operator policy.
  • Retain a matching backup of pending-approvals.jsonl, its .identity-key, and .approved-once directory. Live pending requests migrate; legacy replay grants require fresh approval. Do not restore an old journal over migrated state or substitute an unrelated key.
  • OpenClaw may require its own configuration migration before protection can be repaired. In the tested July-to-September upgrade, openclaw doctor --fix was required for retired host fields. Review that host migration before applying it.

The production guard, log-retention feature, experimental external witness, and website redesign are being prepared separately for 1.9.

Full changelog

Assets 9
Loading