OpenSpace/openspace/host_detection
efe-arv 0711cfd7fa security: harden telemetry, cloud defaults, and credential scoping
Changes:
- Disable telemetry by default (opt-in instead of opt-out)
- Strip user query text and LLM response text from telemetry events
- Remove server_identifiers and tools_available_names from telemetry
- Default search_scope to 'local' (no auto-import of unverified cloud skills)
- Default auto_import to False in search_skills
- Scope OpenClaw credential reading to openspace env block only
- Enable sandbox by default in security config
- Add SECURITY.md with guidance for users

See PR description for full security audit findings.
2026-04-05 21:13:42 +03:00
..
__init__.py clean up LLM credential resolution 2026-04-05 15:13:07 +08:00
nanobot.py clean up LLM credential resolution 2026-04-05 15:13:07 +08:00
openclaw.py security: harden telemetry, cloud defaults, and credential scoping 2026-04-05 21:13:42 +03:00
resolver.py clean up LLM credential resolution 2026-04-05 15:13:07 +08:00