openclaw-policy-engine/openclaw.plugin.json at main · joetomasone/openclaw-policy-engine · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
{
  "id": "policy-engine",
  "name": "Policy Engine",
  "version": "1.0.0",
  "description": "Deterministic governance layer for tool execution — allowlists, deny patterns, risk tiers, dry-run mode, and audit logging.",
  "entry": "index.ts",
  "configSchema": {
    "type": "object",
    "properties": {
      "enabled": { "type": "boolean", "default": true },
      "dryRun": { "type": "boolean", "default": false },
      "dryRunAllowT0": { "type": "boolean", "default": true },
      "dryRunEssentialTools": {
        "type": "array",
        "items": { "type": "string" },
        "description": "Tools that always pass through dry-run mode (control plane). Prevents deadlock.",
        "default": ["message", "gateway", "session_status", "sessions_send", "sessions_list", "tts"]
      },
      "maxBlockedRetries": { "type": "number", "default": 3 },
      "riskTiers": {
        "type": "object",
        "description": "Map of toolName → 'T0'|'T1'|'T2'",
        "additionalProperties": { "type": "string", "enum": ["T0", "T1", "T2"] }
      },
      "denyPatterns": {
        "type": "object",
        "description": "Map of toolName → array of blocked argument patterns",
        "additionalProperties": {
          "type": "array",
          "items": { "type": "string" }
        }
      },
      "allowlists": {
        "type": "object",
        "description": "Map of profile name → array of allowed tool names",
        "additionalProperties": {
          "type": "array",
          "items": { "type": "string" }
        }
      },
      "routing": {
        "type": "object",
        "description": "Map of agentId → { model?, toolProfile? }",
        "additionalProperties": {
          "type": "object",
          "properties": {
            "model": { "type": "string" },
            "toolProfile": { "type": "string" }
          }
        }
      }
    }
  }
}