mirror of
https://github.com/openclaw/openclaw.git
synced 2026-08-24 03:15:46 -06:00
be967545c5
Fail closed when bundled trusted tool policy registry, registration, owner id, evaluation, or decision reads fail, so malformed trusted-policy state cannot crash diagnostics or accidentally allow a tool call. Route before-tool-call diagnostics through guarded trusted-policy readers and keep healthy no-op policy behavior unchanged. Add focused host-hook contract and before-tool-call e2e coverage for the new fail-closed paths. PR: #88394