Commit graph

5 commits

Author SHA1 Message Date
Efe Büken
ea97eaeb76
Merge 0711cfd7fa into d1e367d0ed 2026-04-17 00:14:51 +10:00
Dennis-yxchen
a3a73406a5 fix: resolve pr-60 review regressions 2026-04-06 19:18:22 +08:00
efe-arv
0711cfd7fa security: harden telemetry, cloud defaults, and credential scoping
Changes:
- Disable telemetry by default (opt-in instead of opt-out)
- Strip user query text and LLM response text from telemetry events
- Remove server_identifiers and tools_available_names from telemetry
- Default search_scope to 'local' (no auto-import of unverified cloud skills)
- Default auto_import to False in search_skills
- Scope OpenClaw credential reading to openspace env block only
- Enable sandbox by default in security config
- Add SECURITY.md with guidance for users

See PR description for full security audit findings.
2026-04-05 21:13:42 +03:00
spidercatfly
1bd1a3d377 clean up LLM credential resolution 2026-04-05 15:13:07 +08:00
spidercatfly
6ff4861f88 initial commit 2026-03-24 16:03:22 +08:00