Tools
Guardrails Archive
By Archived prototype: Guardrails plugin extracted before OpenClaw Workbench became a full upstream fork
Install
npm install
npmREADME
# OpenClaw Guardrails
OpenClaw Guardrails is an installable security and operations layer for
[OpenClaw](https://github.com/openclaw/openclaw). It uses OpenClaw's public
plugin contracts and keeps upstream OpenClaw replaceable and upgradeable.
The current release provides pre-tool policy enforcement, native approval
requests, ordered policy overrides, secret-redacted JSONL audit records, and
tool-outcome tracking across OpenClaw and Codex runtimes.
## One-command setup
Windows PowerShell:
```powershell
& ([scriptblock]::Create((iwr -useb https://raw.githubusercontent.com/supermansuper563-ops/openclaw-guardrails/main/install.ps1)))
```
macOS, Linux, or WSL:
```bash
curl -fsSL https://raw.githubusercontent.com/supermansuper563-ops/openclaw-guardrails/main/install.sh | bash
```
The installer installs upstream OpenClaw when needed, runs onboarding, installs
and enables Guardrails, applies `personal-safe`, runs diagnostics, restarts the
Gateway, verifies runtime registration, and opens the Control UI.
OpenClaw onboarding still asks you to choose and authenticate a model provider;
the installer never invents or stores provider credentials.
## Docker
```bash
docker compose up --build
```
The Gateway is exposed only on host loopback at `http://127.0.0.1:18789`.
Configure OpenClaw inside the persistent container state with:
```bash
docker compose run --rm openclaw onboard
```
## Profiles
- `personal-safe`: reads proceed; writes, shell execution, and sends ask.
- `coding`: reads and writes proceed; execution and sends ask.
- `research-only`: non-read actions are blocked.
- `high-autonomy`: most actions proceed; delete and publish always ask.
Use `-Profile coding` on Windows or `--profile coding` on macOS/Linux.
The audit journal defaults to `~/.openclaw/guardrails/journal.jsonl`.
## Development
```bash
npm install
npm run check
npm run doctor
openclaw plugins install --link . --force
openclaw plugins enable guardrails
```
See [docs/ROADMAP.md](docs/ROADMAP.md) for the remaining product phases and
[SECURITY.md](SECURITY.md) for reporting guidance. Development contributions
are covered by [CONTRIBUTING.md](CONTRIBUTING.md), and release changes are
tracked in [CHANGELOG.md](CHANGELOG.md).
tools
Comments
Sign in to leave a comment