@jonathangu/openclawbrain 0.3.0 → 0.3.1

package/docs/evidence/2026-03-16/4ccd71a22418b9170128b8d948f5a95801a10380/status-all.txt

@@ -0,0 +1,61 @@
+[plugins] [openclawbrain] Plugin loaded (enabled=true, db=/Users/cormorantai/.openclaw-ocbphase1/lcm.db, threshold=0.75)
+[plugins] [openclawbrain] Plugin loaded (enabled=true, db=/Users/cormorantai/.openclaw-ocbphase1/lcm.db, threshold=0.75)
+OpenClaw status --all
+
+Overview
+┌─────────────────┬────────────────────────────────────────────────────────────────────────────────────────────────────┐
+│ Item            │ Value                                                                                              │
+├─────────────────┼────────────────────────────────────────────────────────────────────────────────────────────────────┤
+│ Version         │ 2026.3.13                                                                                          │
+│ OS              │ macos 26.3 (arm64)                                                                                 │
+│ Node            │ 22.22.0                                                                                            │
+│ Config          │ $OPENCLAW_HOME/openclaw.json                                                                       │
+│ Dashboard       │ http://127.0.0.1:19031/                                                                            │
+│ Tailscale       │ off · Running · cormorantais-mac-mini.tail499c70.ts.net                                            │
+│ Channel         │ dev (main)                                                                                         │
+│ Git             │ main · @ 66e02b29                                                                                  │
+│ Update          │ git main · ↔ origin/main · behind 618 · npm latest 2026.3.13 · deps ok                            │
+│ Gateway         │ local · ws://127.0.0.1:19031 (local loopback) · unreachable (connect failed: connect ECONNREFUSED  │
+│                 │ 127.0.0.1:19031)                                                                                   │
+│ Security        │ Run: openclaw security audit --deep                                                                │
+│ Gateway self    │ unknown                                                                                            │
+│ Gateway service │ LaunchAgent not installed                                                                          │
+│ Node service    │ LaunchAgent not installed                                                                          │
+│ Agents          │ 1 total · 0 bootstrapping · 1 active · 1 sessions                                                  │
+└─────────────────┴────────────────────────────────────────────────────────────────────────────────────────────────────┘
+
+Channels
+┌──────────┬─────────┬────────┬────────────────────────────────────────────────────────────────────────────────────────┐
+│ Channel  │ Enabled │ State  │ Detail                                                                                 │
+├──────────┼─────────┼────────┼────────────────────────────────────────────────────────────────────────────────────────┤
+└──────────┴─────────┴────────┴────────────────────────────────────────────────────────────────────────────────────────┘
+
+Agents
+┌────────────┬────────────────┬──────────┬──────────┬──────────────────────────────────────────────────────────────────┐
+│ Agent      │ Bootstrap file │ Sessions │ Active   │ Store                                                            │
+├────────────┼────────────────┼──────────┼──────────┼──────────────────────────────────────────────────────────────────┤
+│ main       │ ABSENT         │        1 │ 1m ago   │ $OPENCLAW_HOME/agents/main/sessions/sessions.json                │
+└────────────┴────────────────┴──────────┴──────────┴──────────────────────────────────────────────────────────────────┘
+
+Diagnosis (read-only)
+
+Gateway connection details:
+  Gateway target: ws://127.0.0.1:19031
+  Source: local loopback
+  Config: /Users/cormorantai/.openclaw-ocbphase1/openclaw.json
+  Bind: loopback
+
+✓ Config: /Users/cormorantai/.openclaw-ocbphase1/openclaw.json
+✓ Restart sentinel: none
+✓ Port 19031
+✓ Tailscale: off · Running · cormorantais-mac-mini.tail499c70.ts.net
+  ips: 100.73.247.26, fd7a:115c:a1e0::e932:f71a
+✓ Skills: 9 eligible · 0 missing · /Users/cormorantai/.openclaw-ocbphase1/workspace-fixture
+! Channel issues skipped (gateway unreachable)
+
+Gateway health:
+  connect failed: connect ECONNREFUSED 127.0.0.1:19031
+
+Pasteable debug report. Auth tokens redacted.
+Troubleshooting: https://docs.openclaw.ai/troubleshooting
+

package/docs/evidence/2026-03-16/4ccd71a22418b9170128b8d948f5a95801a10380/status.json

@@ -0,0 +1,275 @@
+{
+  "command": "openclaw",
+  "args": [
+    "status",
+    "--json",
+    "--timeout",
+    "10000"
+  ],
+  "cwd": "/Users/cormorantai/openclawbrain",
+  "exitCode": 0,
+  "signal": null,
+  "ok": true,
+  "stdout": "[plugins] [openclawbrain] Plugin loaded (enabled=true, db=/Users/cormorantai/.openclaw-ocbphase1/lcm.db, threshold=0.75)\n[plugins] [openclawbrain] Plugin loaded (enabled=true, db=/Users/cormorantai/.openclaw-ocbphase1/lcm.db, threshold=0.75)\n{\n  \"runtimeVersion\": \"2026.3.13\",\n  \"heartbeat\": {\n    \"defaultAgentId\": \"main\",\n    \"agents\": [\n      {\n        \"agentId\": \"main\",\n        \"enabled\": true,\n        \"every\": \"30m\",\n        \"everyMs\": 1800000\n      }\n    ]\n  },\n  \"channelSummary\": [],\n  \"queuedSystemEvents\": [],\n  \"sessions\": {\n    \"paths\": [\n      \"/Users/cormorantai/.openclaw-ocbphase1/agents/main/sessions/sessions.json\"\n    ],\n    \"count\": 1,\n    \"defaults\": {\n      \"model\": \"qwen2.5:7b-instruct\",\n      \"contextTokens\": 262144\n    },\n    \"recent\": [\n      {\n        \"agentId\": \"main\",\n        \"key\": \"agent:main:main\",\n        \"kind\": \"direct\",\n        \"sessionId\": \"93eb604e-21e6-4802-81c1-04c889244efb\",\n        \"updatedAt\": 1773675771940,\n        \"age\": 25804,\n        \"abortedLastRun\": false,\n        \"inputTokens\": 22808,\n        \"outputTokens\": 219,\n        \"cacheRead\": 0,\n        \"cacheWrite\": 0,\n        \"totalTokens\": 22808,\n        \"totalTokensFresh\": true,\n        \"remainingTokens\": 239336,\n        \"percentUsed\": 9,\n        \"model\": \"qwen2.5:7b-instruct\",\n        \"contextTokens\": 262144,\n        \"flags\": [\n          \"id:93eb604e-21e6-4802-81c1-04c889244efb\"\n        ]\n      }\n    ],\n    \"byAgent\": [\n      {\n        \"agentId\": \"main\",\n        \"path\": \"/Users/cormorantai/.openclaw-ocbphase1/agents/main/sessions/sessions.json\",\n        \"count\": 1,\n        \"recent\": [\n          {\n            \"agentId\": \"main\",\n            \"key\": \"agent:main:main\",\n            \"kind\": \"direct\",\n            \"sessionId\": \"93eb604e-21e6-4802-81c1-04c889244efb\",\n            \"updatedAt\": 1773675771940,\n            \"age\": 25804,\n            \"abortedLastRun\": false,\n            \"inputTokens\": 22808,\n            \"outputTokens\": 219,\n            \"cacheRead\": 0,\n            \"cacheWrite\": 0,\n            \"totalTokens\": 22808,\n            \"totalTokensFresh\": true,\n            \"remainingTokens\": 239336,\n            \"percentUsed\": 9,\n            \"model\": \"qwen2.5:7b-instruct\",\n            \"contextTokens\": 262144,\n            \"flags\": [\n              \"id:93eb604e-21e6-4802-81c1-04c889244efb\"\n            ]\n          }\n        ]\n      }\n    ]\n  },\n  \"os\": {\n    \"platform\": \"darwin\",\n    \"arch\": \"arm64\",\n    \"release\": \"25.3.0\",\n    \"label\": \"macos 26.3 (arm64)\"\n  },\n  \"update\": {\n    \"root\": \"/Users/cormorantai/opencormorant\",\n    \"installKind\": \"git\",\n    \"packageManager\": \"pnpm\",\n    \"git\": {\n      \"root\": \"/Users/cormorantai/opencormorant\",\n      \"sha\": \"66e02b296fa7c18c04dc94fe071d916042a30137\",\n      \"tag\": null,\n      \"branch\": \"main\",\n      \"upstream\": \"origin/main\",\n      \"dirty\": false,\n      \"ahead\": 0,\n      \"behind\": 618,\n      \"fetchOk\": true\n    },\n    \"deps\": {\n      \"manager\": \"pnpm\",\n      \"status\": \"ok\",\n      \"lockfilePath\": \"/Users/cormorantai/opencormorant/pnpm-lock.yaml\",\n      \"markerPath\": \"/Users/cormorantai/opencormorant/node_modules/.modules.yaml\"\n    },\n    \"registry\": {\n      \"latestVersion\": \"2026.3.13\"\n    }\n  },\n  \"updateChannel\": \"dev\",\n  \"updateChannelSource\": \"git-branch\",\n  \"memory\": {\n    \"agentId\": \"main\",\n    \"backend\": \"builtin\",\n    \"files\": 0,\n    \"chunks\": 0,\n    \"dirty\": true,\n    \"workspaceDir\": \"/Users/cormorantai/.openclaw-ocbphase1/workspace-fixture\",\n    \"dbPath\": \"/Users/cormorantai/.openclaw-ocbphase1/memory/main.sqlite\",\n    \"provider\": \"gemini\",\n    \"model\": \"gemini-embedding-001\",\n    \"requestedProvider\": \"auto\",\n    \"sources\": [\n      \"memory\"\n    ],\n    \"extraPaths\": [],\n    \"sourceCounts\": [\n      {\n        \"source\": \"memory\",\n        \"files\": 0,\n        \"chunks\": 0\n      }\n    ],\n    \"cache\": {\n      \"enabled\": true,\n      \"entries\": 0\n    },\n    \"fts\": {\n      \"enabled\": true,\n      \"available\": true\n    },\n    \"vector\": {\n      \"enabled\": true,\n      \"available\": true,\n      \"extensionPath\": \"/Users/cormorantai/opencormorant/node_modules/.pnpm/sqlite-vec@0.1.7-alpha.2/node_modules/sqlite-vec-darwin-arm64/vec0.dylib\"\n    },\n    \"batch\": {\n      \"enabled\": false,\n      \"failures\": 0,\n      \"limit\": 2,\n      \"wait\": true,\n      \"concurrency\": 2,\n      \"pollIntervalMs\": 2000,\n      \"timeoutMs\": 3600000\n    },\n    \"custom\": {\n      \"searchMode\": \"hybrid\",\n      \"readonlyRecovery\": {\n        \"attempts\": 0,\n        \"successes\": 0,\n        \"failures\": 0\n      }\n    }\n  },\n  \"memoryPlugin\": {\n    \"enabled\": true,\n    \"slot\": \"memory-core\"\n  },\n  \"gateway\": {\n    \"mode\": \"local\",\n    \"url\": \"ws://127.0.0.1:19031\",\n    \"urlSource\": \"local loopback\",\n    \"misconfigured\": false,\n    \"reachable\": false,\n    \"connectLatencyMs\": null,\n    \"self\": null,\n    \"error\": \"connect failed: connect ECONNREFUSED 127.0.0.1:19031\",\n    \"authWarning\": null\n  },\n  \"gatewayService\": {\n    \"label\": \"LaunchAgent\",\n    \"installed\": false,\n    \"managedByOpenClaw\": false,\n    \"externallyManaged\": false,\n    \"loadedText\": \"not loaded\",\n    \"runtimeShort\": \"unknown\"\n  },\n  \"nodeService\": {\n    \"label\": \"LaunchAgent\",\n    \"installed\": false,\n    \"managedByOpenClaw\": false,\n    \"externallyManaged\": false,\n    \"loadedText\": \"not loaded\",\n    \"runtimeShort\": \"unknown\"\n  },\n  \"agents\": {\n    \"defaultId\": \"main\",\n    \"agents\": [\n      {\n        \"id\": \"main\",\n        \"workspaceDir\": \"/Users/cormorantai/.openclaw-ocbphase1/workspace-fixture\",\n        \"bootstrapPending\": false,\n        \"sessionsPath\": \"/Users/cormorantai/.openclaw-ocbphase1/agents/main/sessions/sessions.json\",\n        \"sessionsCount\": 1,\n        \"lastUpdatedAt\": 1773675771940,\n        \"lastActiveAgeMs\": 25800\n      }\n    ],\n    \"totalSessions\": 1,\n    \"bootstrapPendingCount\": 0\n  },\n  \"securityAudit\": {\n    \"ts\": 1773675800284,\n    \"summary\": {\n      \"critical\": 3,\n      \"warn\": 1,\n      \"info\": 1\n    },\n    \"findings\": [\n      {\n        \"checkId\": \"summary.attack_surface\",\n        \"severity\": \"info\",\n        \"title\": \"Attack surface summary\",\n        \"detail\": \"groups: open=0, allowlist=0\\ntools.elevated: enabled\\nhooks.webhooks: disabled\\nhooks.internal: disabled\\nbrowser control: enabled\\ntrust model: personal assistant (one trusted operator boundary), not hostile multi-tenant on one shared gateway\"\n      },\n      {\n        \"checkId\": \"gateway.trusted_proxies_missing\",\n        \"severity\": \"warn\",\n        \"title\": \"Reverse proxy headers are not trusted\",\n        \"detail\": \"gateway.bind is loopback and gateway.trustedProxies is empty. If you expose the Control UI through a reverse proxy, configure trusted proxies so local-client checks cannot be spoofed.\",\n        \"remediation\": \"Set gateway.trustedProxies to your proxy IPs or keep the Control UI local-only.\"\n      },\n      {\n        \"checkId\": \"gateway.loopback_no_auth\",\n        \"severity\": \"critical\",\n        \"title\": \"Gateway auth missing on loopback\",\n        \"detail\": \"gateway.bind is loopback but no gateway auth secret is configured. If the Control UI is exposed through a reverse proxy, unauthenticated access is possible.\",\n        \"remediation\": \"Set gateway.auth (token recommended) or keep the Control UI local-only.\"\n      },\n      {\n        \"checkId\": \"browser.control_no_auth\",\n        \"severity\": \"critical\",\n        \"title\": \"Browser control has no auth\",\n        \"detail\": \"Browser control HTTP routes are enabled but no gateway.auth token/password is configured. Any local process (or SSRF to loopback) can call browser control endpoints.\",\n        \"remediation\": \"Set gateway.auth.token (recommended) or gateway.auth.password so browser control HTTP routes require authentication. Restarting the gateway will auto-generate gateway.auth.token when browser control is enabled.\"\n      },\n      {\n        \"checkId\": \"models.small_params\",\n        \"severity\": \"critical\",\n        \"title\": \"Small models require sandboxing and web tools disabled\",\n        \"detail\": \"Small models (<=300B params) detected:\\n- ollama/qwen2.5:7b-instruct (7B) @ agents.defaults.model.primary (unsafe; sandbox=off; web=[web_search, web_fetch, browser])\\nUncontrolled input tools allowed: web_search, web_fetch, browser.\\nSmall models are not recommended for untrusted inputs.\",\n        \"remediation\": \"If you must use small models, enable sandboxing for all sessions (agents.defaults.sandbox.mode=\\\"all\\\") and disable web_search/web_fetch/browser (tools.deny=[\\\"group:web\\\",\\\"browser\\\"]).\"\n      }\n    ]\n  },\n  \"secretDiagnostics\": []\n}\n",
+  "stderr": "[plugins] plugins.allow is empty; discovered non-bundled plugins may auto-load: openclawbrain (/Users/cormorantai/openclawbrain/index.ts). Set plugins.allow to explicit trusted ids.\n[plugins] plugins.allow is empty; discovered non-bundled plugins may auto-load: openclawbrain (/Users/cormorantai/openclawbrain/index.ts). Set plugins.allow to explicit trusted ids.\n",
+  "error": null,
+  "parsed": {
+    "runtimeVersion": "2026.3.13",
+    "heartbeat": {
+      "defaultAgentId": "main",
+      "agents": [
+        {
+          "agentId": "main",
+          "enabled": true,
+          "every": "30m",
+          "everyMs": 1800000
+        }
+      ]
+    },
+    "channelSummary": [],
+    "queuedSystemEvents": [],
+    "sessions": {
+      "paths": [
+        "/Users/cormorantai/.openclaw-ocbphase1/agents/main/sessions/sessions.json"
+      ],
+      "count": 1,
+      "defaults": {
+        "model": "qwen2.5:7b-instruct",
+        "contextTokens": 262144
+      },
+      "recent": [
+        {
+          "agentId": "main",
+          "key": "agent:main:main",
+          "kind": "direct",
+          "sessionId": "93eb604e-21e6-4802-81c1-04c889244efb",
+          "updatedAt": 1773675771940,
+          "age": 25804,
+          "abortedLastRun": false,
+          "inputTokens": 22808,
+          "outputTokens": 219,
+          "cacheRead": 0,
+          "cacheWrite": 0,
+          "totalTokens": 22808,
+          "totalTokensFresh": true,
+          "remainingTokens": 239336,
+          "percentUsed": 9,
+          "model": "qwen2.5:7b-instruct",
+          "contextTokens": 262144,
+          "flags": [
+            "id:93eb604e-21e6-4802-81c1-04c889244efb"
+          ]
+        }
+      ],
+      "byAgent": [
+        {
+          "agentId": "main",
+          "path": "/Users/cormorantai/.openclaw-ocbphase1/agents/main/sessions/sessions.json",
+          "count": 1,
+          "recent": [
+            {
+              "agentId": "main",
+              "key": "agent:main:main",
+              "kind": "direct",
+              "sessionId": "93eb604e-21e6-4802-81c1-04c889244efb",
+              "updatedAt": 1773675771940,
+              "age": 25804,
+              "abortedLastRun": false,
+              "inputTokens": 22808,
+              "outputTokens": 219,
+              "cacheRead": 0,
+              "cacheWrite": 0,
+              "totalTokens": 22808,
+              "totalTokensFresh": true,
+              "remainingTokens": 239336,
+              "percentUsed": 9,
+              "model": "qwen2.5:7b-instruct",
+              "contextTokens": 262144,
+              "flags": [
+                "id:93eb604e-21e6-4802-81c1-04c889244efb"
+              ]
+            }
+          ]
+        }
+      ]
+    },
+    "os": {
+      "platform": "darwin",
+      "arch": "arm64",
+      "release": "25.3.0",
+      "label": "macos 26.3 (arm64)"
+    },
+    "update": {
+      "root": "/Users/cormorantai/opencormorant",
+      "installKind": "git",
+      "packageManager": "pnpm",
+      "git": {
+        "root": "/Users/cormorantai/opencormorant",
+        "sha": "66e02b296fa7c18c04dc94fe071d916042a30137",
+        "tag": null,
+        "branch": "main",
+        "upstream": "origin/main",
+        "dirty": false,
+        "ahead": 0,
+        "behind": 618,
+        "fetchOk": true
+      },
+      "deps": {
+        "manager": "pnpm",
+        "status": "ok",
+        "lockfilePath": "/Users/cormorantai/opencormorant/pnpm-lock.yaml",
+        "markerPath": "/Users/cormorantai/opencormorant/node_modules/.modules.yaml"
+      },
+      "registry": {
+        "latestVersion": "2026.3.13"
+      }
+    },
+    "updateChannel": "dev",
+    "updateChannelSource": "git-branch",
+    "memory": {
+      "agentId": "main",
+      "backend": "builtin",
+      "files": 0,
+      "chunks": 0,
+      "dirty": true,
+      "workspaceDir": "/Users/cormorantai/.openclaw-ocbphase1/workspace-fixture",
+      "dbPath": "/Users/cormorantai/.openclaw-ocbphase1/memory/main.sqlite",
+      "provider": "gemini",
+      "model": "gemini-embedding-001",
+      "requestedProvider": "auto",
+      "sources": [
+        "memory"
+      ],
+      "extraPaths": [],
+      "sourceCounts": [
+        {
+          "source": "memory",
+          "files": 0,
+          "chunks": 0
+        }
+      ],
+      "cache": {
+        "enabled": true,
+        "entries": 0
+      },
+      "fts": {
+        "enabled": true,
+        "available": true
+      },
+      "vector": {
+        "enabled": true,
+        "available": true,
+        "extensionPath": "/Users/cormorantai/opencormorant/node_modules/.pnpm/sqlite-vec@0.1.7-alpha.2/node_modules/sqlite-vec-darwin-arm64/vec0.dylib"
+      },
+      "batch": {
+        "enabled": false,
+        "failures": 0,
+        "limit": 2,
+        "wait": true,
+        "concurrency": 2,
+        "pollIntervalMs": 2000,
+        "timeoutMs": 3600000
+      },
+      "custom": {
+        "searchMode": "hybrid",
+        "readonlyRecovery": {
+          "attempts": 0,
+          "successes": 0,
+          "failures": 0
+        }
+      }
+    },
+    "memoryPlugin": {
+      "enabled": true,
+      "slot": "memory-core"
+    },
+    "gateway": {
+      "mode": "local",
+      "url": "ws://127.0.0.1:19031",
+      "urlSource": "local loopback",
+      "misconfigured": false,
+      "reachable": false,
+      "connectLatencyMs": null,
+      "self": null,
+      "error": "connect failed: connect ECONNREFUSED 127.0.0.1:19031",
+      "authWarning": null
+    },
+    "gatewayService": {
+      "label": "LaunchAgent",
+      "installed": false,
+      "managedByOpenClaw": false,
+      "externallyManaged": false,
+      "loadedText": "not loaded",
+      "runtimeShort": "unknown"
+    },
+    "nodeService": {
+      "label": "LaunchAgent",
+      "installed": false,
+      "managedByOpenClaw": false,
+      "externallyManaged": false,
+      "loadedText": "not loaded",
+      "runtimeShort": "unknown"
+    },
+    "agents": {
+      "defaultId": "main",
+      "agents": [
+        {
+          "id": "main",
+          "workspaceDir": "/Users/cormorantai/.openclaw-ocbphase1/workspace-fixture",
+          "bootstrapPending": false,
+          "sessionsPath": "/Users/cormorantai/.openclaw-ocbphase1/agents/main/sessions/sessions.json",
+          "sessionsCount": 1,
+          "lastUpdatedAt": 1773675771940,
+          "lastActiveAgeMs": 25800
+        }
+      ],
+      "totalSessions": 1,
+      "bootstrapPendingCount": 0
+    },
+    "securityAudit": {
+      "ts": 1773675800284,
+      "summary": {
+        "critical": 3,
+        "warn": 1,
+        "info": 1
+      },
+      "findings": [
+        {
+          "checkId": "summary.attack_surface",
+          "severity": "info",
+          "title": "Attack surface summary",
+          "detail": "groups: open=0, allowlist=0\ntools.elevated: enabled\nhooks.webhooks: disabled\nhooks.internal: disabled\nbrowser control: enabled\ntrust model: personal assistant (one trusted operator boundary), not hostile multi-tenant on one shared gateway"
+        },
+        {
+          "checkId": "gateway.trusted_proxies_missing",
+          "severity": "warn",
+          "title": "Reverse proxy headers are not trusted",
+          "detail": "gateway.bind is loopback and gateway.trustedProxies is empty. If you expose the Control UI through a reverse proxy, configure trusted proxies so local-client checks cannot be spoofed.",
+          "remediation": "Set gateway.trustedProxies to your proxy IPs or keep the Control UI local-only."
+        },
+        {
+          "checkId": "gateway.loopback_no_auth",
+          "severity": "critical",
+          "title": "Gateway auth missing on loopback",
+          "detail": "gateway.bind is loopback but no gateway auth secret is configured. If the Control UI is exposed through a reverse proxy, unauthenticated access is possible.",
+          "remediation": "Set gateway.auth (token recommended) or keep the Control UI local-only."
+        },
+        {
+          "checkId": "browser.control_no_auth",
+          "severity": "critical",
+          "title": "Browser control has no auth",
+          "detail": "Browser control HTTP routes are enabled but no gateway.auth token/password is configured. Any local process (or SSRF to loopback) can call browser control endpoints.",
+          "remediation": "Set gateway.auth.token (recommended) or gateway.auth.password so browser control HTTP routes require authentication. Restarting the gateway will auto-generate gateway.auth.token when browser control is enabled."
+        },
+        {
+          "checkId": "models.small_params",
+          "severity": "critical",
+          "title": "Small models require sandboxing and web tools disabled",
+          "detail": "Small models (<=300B params) detected:\n- ollama/qwen2.5:7b-instruct (7B) @ agents.defaults.model.primary (unsafe; sandbox=off; web=[web_search, web_fetch, browser])\nUncontrolled input tools allowed: web_search, web_fetch, browser.\nSmall models are not recommended for untrusted inputs.",
+          "remediation": "If you must use small models, enable sandboxing for all sessions (agents.defaults.sandbox.mode=\"all\") and disable web_search/web_fetch/browser (tools.deny=[\"group:web\",\"browser\"])."
+        }
+      ]
+    },
+    "secretDiagnostics": []
+  }
+}

package/docs/evidence/2026-03-16/4ccd71a22418b9170128b8d948f5a95801a10380/summary.md

@@ -0,0 +1,21 @@
+# OpenClawBrain validation summary
+
+- commit: `4ccd71a22418b9170128b8d948f5a95801a10380`
+- validation mode: sterile-lane
+- config path: `/Users/cormorantai/.openclaw-ocbphase1/openclaw.json`
+- state dir: `/Users/cormorantai/.openclaw-ocbphase1`
+- workspace: `/Users/cormorantai/.openclaw-ocbphase1/workspace-fixture`
+- artifact dir: `/Users/cormorantai/openclawbrain/docs/evidence/2026-03-16/4ccd71a22418b9170128b8d948f5a95801a10380`
+
+## Assertions
+- teachRetrieval: {"taughtNodeId":"bn_2000f3c7-793","packVersion":17,"retrievedCorrectionVisible":true,"traceIncludesTaughtNode":true,"retrievedPackVersion":17}
+- workerDownFailOpen: {"servedBeforeCrash":true,"servedPullRequestGuidanceBeforeCrash":true,"workerHealthyAfterCrash":false,"workerLastExit":{"code":null,"signal":"SIGKILL","at":1773675824182},"currentPackVersion":8,"servedAfterCrash":true,"servedPackVersion":8,"servedPullRequestGuidance":true}
+- recurrentQuery: {"validationRecordCountBefore":2,"validationRecordCountAfter":2,"mode":null,"traceId":null,"episodeId":null,"traceQueryText":null,"workerMode":"child","workerPid":null,"workerHealthy":false,"workerLastHeartbeatAt":null,"currentPackVersion":12,"aborted":false}
+- shortLookup: {"validationRecordCountBefore":2,"validationRecordCountAfter":2,"mode":null,"traceId":null,"lastAssemblyMode":"use_brain","aborted":false,"bypassEvidence":"Since `PLAYBOOK.md` does not exist in the provided project context files, would you like to create a new `PLAYBOOK.md` file? Here is an example of how you can create it using the `write` tool:\n\n```jso"}
+- shadowMode: {"shadowMode":true,"validationRecordCountBefore":2,"validationRecordCountAfter":2,"mode":null,"traceId":null,"episodeId":null,"traceQueryText":null,"injectedContextVisible":false,"aborted":false}
+- noEmbedding: {"validationRecordCountBefore":2,"validationRecordCountAfter":2,"mode":null,"traceId":null,"lastAssemblyMode":"use_brain","aborted":false}
+- uninitialized: {"validationRecordCountBefore":2,"validationRecordCountAfter":2,"mode":null,"traceId":null,"lastAssemblyMode":null,"aborted":false}
+
+## Skipped
+- worker-down: Host-surface worker-down assertion requires child-worker mode with a live worker PID.
+- brain-teach: Phase-1 harness still needs a deterministic host-surface path for brain_teach assertion wiring; raw openclaw agent --local text prompting does not force tool use honestly.

package/docs/evidence/2026-03-16/4ccd71a22418b9170128b8d948f5a95801a10380/trace.json

@@ -0,0 +1,222 @@
+{
+  "command": "node",
+  "args": [
+    "bin/openclawbrain.js",
+    "trace"
+  ],
+  "cwd": "/Users/cormorantai/openclawbrain",
+  "exitCode": 0,
+  "signal": null,
+  "ok": true,
+  "stdout": "{\n  \"command\": \"trace\",\n  \"trace\": {\n    \"id\": \"bt_c79a93d6\",\n    \"episodeId\": \"be_5a29c9cf-99b\",\n    \"packVersion\": 1,\n    \"queryText\": \"How do I open a pull request again?\",\n    \"seedScores\": [\n      {\n        \"nodeId\": \"bn_40502fac-df0\",\n        \"priorScore\": 0.7326886480086391,\n        \"learnedSeedWeight\": 0,\n        \"policyScore\": 0.7326886480086391,\n        \"probability\": 0.9999999999986446,\n        \"chosen\": true\n      }\n    ],\n    \"trajectory\": [\n      {\n        \"stateSnapshot\": {\n          \"currentNodeId\": null,\n          \"hopCount\": 0,\n          \"budgetRemaining\": 314572,\n          \"visitedCount\": 0,\n          \"firedCount\": 0\n        },\n        \"candidates\": [\n          {\n            \"action\": {\n              \"type\": \"traverse\",\n              \"targetNodeId\": \"bn_40502fac-df0\",\n              \"seedScore\": 0.7326886480086391\n            },\n            \"score\": 0.7326886480086391,\n            \"probability\": 0.9999999999986446,\n            \"priorScore\": 0.7326886480086391,\n            \"learnedSeedWeight\": 0\n          },\n          {\n            \"action\": {\n              \"type\": \"stop\"\n            },\n            \"score\": -2,\n            \"probability\": 1.3554515361624555e-12\n          }\n        ],\n        \"chosenAction\": {\n          \"type\": \"traverse\",\n          \"targetNodeId\": \"bn_40502fac-df0\",\n          \"seedScore\": 0.7326886480086391\n        },\n        \"chosenActionProbability\": 0.9999999999986446,\n        \"stopProbability\": 1.3554515361624555e-12\n      },\n      {\n        \"stateSnapshot\": {\n          \"currentNodeId\": \"bn_40502fac-df0\",\n          \"hopCount\": 1,\n          \"budgetRemaining\": 314539,\n          \"visitedCount\": 1,\n          \"firedCount\": 1\n        },\n        \"candidates\": [\n          {\n            \"action\": {\n              \"type\": \"traverse\",\n              \"targetNodeId\": \"bn_0e867ad3-a44\"\n            },\n            \"score\": 1.3833746213110998,\n            \"probability\": 0.9999999999999754\n          },\n          {\n            \"action\": {\n              \"type\": \"stop\"\n            },\n            \"score\": -1.7496852866752284,\n            \"probability\": 2.4733962892288202e-14\n          }\n        ],\n        \"chosenAction\": {\n          \"type\": \"traverse\",\n          \"targetNodeId\": \"bn_0e867ad3-a44\"\n        },\n        \"chosenActionProbability\": 0.9999999999999754,\n        \"stopProbability\": 2.4733962892288202e-14\n      },\n      {\n        \"stateSnapshot\": {\n          \"currentNodeId\": \"bn_0e867ad3-a44\",\n          \"hopCount\": 2,\n          \"budgetRemaining\": 314524,\n          \"visitedCount\": 2,\n          \"firedCount\": 2\n        },\n        \"candidates\": [\n          {\n            \"action\": {\n              \"type\": \"traverse\",\n              \"targetNodeId\": \"bn_7aa03640-409\"\n            },\n            \"score\": 1.6571061718222952,\n            \"probability\": 0.9346462837250167\n          },\n          {\n            \"action\": {\n              \"type\": \"traverse\",\n              \"targetNodeId\": \"bn_56d0d6a0-bf5\"\n            },\n            \"score\": 1.3910707872392618,\n            \"probability\": 0.065353716274965\n          },\n          {\n            \"action\": {\n              \"type\": \"stop\"\n            },\n            \"score\": -1.499542235163969,\n            \"probability\": 1.825985980821016e-14\n          }\n        ],\n        \"chosenAction\": {\n          \"type\": \"traverse\",\n          \"targetNodeId\": \"bn_7aa03640-409\"\n        },\n        \"chosenActionProbability\": 0.9346462837250167,\n        \"stopProbability\": 1.825985980821016e-14\n      },\n      {\n        \"stateSnapshot\": {\n          \"currentNodeId\": \"bn_7aa03640-409\",\n          \"hopCount\": 3,\n          \"budgetRemaining\": 314510,\n          \"visitedCount\": 3,\n          \"firedCount\": 3\n        },\n        \"candidates\": [\n          {\n            \"action\": {\n              \"type\": \"traverse\",\n              \"targetNodeId\": \"bn_56d0d6a0-bf5\"\n            },\n            \"score\": 1.385168196641951,\n            \"probability\": 0.9999999999963844\n          },\n          {\n            \"action\": {\n              \"type\": \"stop\"\n            },\n            \"score\": -1.2494087204201265,\n            \"probability\": 3.61557877056812e-12\n          }\n        ],\n        \"chosenAction\": {\n          \"type\": \"traverse\",\n          \"targetNodeId\": \"bn_56d0d6a0-bf5\"\n        },\n        \"chosenActionProbability\": 0.9999999999963844,\n        \"stopProbability\": 3.61557877056812e-12\n      },\n      {\n        \"stateSnapshot\": {\n          \"currentNodeId\": \"bn_56d0d6a0-bf5\",\n          \"hopCount\": 4,\n          \"budgetRemaining\": 314473,\n          \"visitedCount\": 4,\n          \"firedCount\": 4\n        },\n        \"candidates\": [\n          {\n            \"action\": {\n              \"type\": \"stop\"\n            },\n            \"score\": 0,\n            \"probability\": 1\n          }\n        ],\n        \"chosenAction\": {\n          \"type\": \"stop\"\n        },\n        \"chosenActionProbability\": 1,\n        \"stopProbability\": 1\n      }\n    ],\n    \"firedNodes\": [\n      \"bn_40502fac-df0\",\n      \"bn_0e867ad3-a44\",\n      \"bn_7aa03640-409\",\n      \"bn_56d0d6a0-bf5\"\n    ],\n    \"vetoedNodes\": [],\n    \"contextChars\": 391,\n    \"footer\": \"Brain · 1 seeds · start bn_40502fac-df0 · 4 hops · 4 fired · 0 veto · 391 chars\",\n    \"createdAt\": 1773635212770\n  },\n  \"chosenSeed\": {\n    \"nodeId\": \"bn_40502fac-df0\",\n    \"priorScore\": 0.7326886480086391,\n    \"learnedSeedWeight\": 0,\n    \"policyScore\": 0.7326886480086391,\n    \"probability\": 0.9999999999986446,\n    \"chosen\": true\n  },\n  \"finalSectionOrder\": [\n    \"correction_cards\",\n    \"route_selected_evidence\",\n    \"toolcards_and_workflows\",\n    \"transcript_support\"\n  ]\n}\n",
+  "stderr": "",
+  "error": null,
+  "parsed": {
+    "command": "trace",
+    "trace": {
+      "id": "bt_c79a93d6",
+      "episodeId": "be_5a29c9cf-99b",
+      "packVersion": 1,
+      "queryText": "How do I open a pull request again?",
+      "seedScores": [
+        {
+          "nodeId": "bn_40502fac-df0",
+          "priorScore": 0.7326886480086391,
+          "learnedSeedWeight": 0,
+          "policyScore": 0.7326886480086391,
+          "probability": 0.9999999999986446,
+          "chosen": true
+        }
+      ],
+      "trajectory": [
+        {
+          "stateSnapshot": {
+            "currentNodeId": null,
+            "hopCount": 0,
+            "budgetRemaining": 314572,
+            "visitedCount": 0,
+            "firedCount": 0
+          },
+          "candidates": [
+            {
+              "action": {
+                "type": "traverse",
+                "targetNodeId": "bn_40502fac-df0",
+                "seedScore": 0.7326886480086391
+              },
+              "score": 0.7326886480086391,
+              "probability": 0.9999999999986446,
+              "priorScore": 0.7326886480086391,
+              "learnedSeedWeight": 0
+            },
+            {
+              "action": {
+                "type": "stop"
+              },
+              "score": -2,
+              "probability": 1.3554515361624555e-12
+            }
+          ],
+          "chosenAction": {
+            "type": "traverse",
+            "targetNodeId": "bn_40502fac-df0",
+            "seedScore": 0.7326886480086391
+          },
+          "chosenActionProbability": 0.9999999999986446,
+          "stopProbability": 1.3554515361624555e-12
+        },
+        {
+          "stateSnapshot": {
+            "currentNodeId": "bn_40502fac-df0",
+            "hopCount": 1,
+            "budgetRemaining": 314539,
+            "visitedCount": 1,
+            "firedCount": 1
+          },
+          "candidates": [
+            {
+              "action": {
+                "type": "traverse",
+                "targetNodeId": "bn_0e867ad3-a44"
+              },
+              "score": 1.3833746213110998,
+              "probability": 0.9999999999999754
+            },
+            {
+              "action": {
+                "type": "stop"
+              },
+              "score": -1.7496852866752284,
+              "probability": 2.4733962892288202e-14
+            }
+          ],
+          "chosenAction": {
+            "type": "traverse",
+            "targetNodeId": "bn_0e867ad3-a44"
+          },
+          "chosenActionProbability": 0.9999999999999754,
+          "stopProbability": 2.4733962892288202e-14
+        },
+        {
+          "stateSnapshot": {
+            "currentNodeId": "bn_0e867ad3-a44",
+            "hopCount": 2,
+            "budgetRemaining": 314524,
+            "visitedCount": 2,
+            "firedCount": 2
+          },
+          "candidates": [
+            {
+              "action": {
+                "type": "traverse",
+                "targetNodeId": "bn_7aa03640-409"
+              },
+              "score": 1.6571061718222952,
+              "probability": 0.9346462837250167
+            },
+            {
+              "action": {
+                "type": "traverse",
+                "targetNodeId": "bn_56d0d6a0-bf5"
+              },
+              "score": 1.3910707872392618,
+              "probability": 0.065353716274965
+            },
+            {
+              "action": {
+                "type": "stop"
+              },
+              "score": -1.499542235163969,
+              "probability": 1.825985980821016e-14
+            }
+          ],
+          "chosenAction": {
+            "type": "traverse",
+            "targetNodeId": "bn_7aa03640-409"
+          },
+          "chosenActionProbability": 0.9346462837250167,
+          "stopProbability": 1.825985980821016e-14
+        },
+        {
+          "stateSnapshot": {
+            "currentNodeId": "bn_7aa03640-409",
+            "hopCount": 3,
+            "budgetRemaining": 314510,
+            "visitedCount": 3,
+            "firedCount": 3
+          },
+          "candidates": [
+            {
+              "action": {
+                "type": "traverse",
+                "targetNodeId": "bn_56d0d6a0-bf5"
+              },
+              "score": 1.385168196641951,
+              "probability": 0.9999999999963844
+            },
+            {
+              "action": {
+                "type": "stop"
+              },
+              "score": -1.2494087204201265,
+              "probability": 3.61557877056812e-12
+            }
+          ],
+          "chosenAction": {
+            "type": "traverse",
+            "targetNodeId": "bn_56d0d6a0-bf5"
+          },
+          "chosenActionProbability": 0.9999999999963844,
+          "stopProbability": 3.61557877056812e-12
+        },
+        {
+          "stateSnapshot": {
+            "currentNodeId": "bn_56d0d6a0-bf5",
+            "hopCount": 4,
+            "budgetRemaining": 314473,
+            "visitedCount": 4,
+            "firedCount": 4
+          },
+          "candidates": [
+            {
+              "action": {
+                "type": "stop"
+              },
+              "score": 0,
+              "probability": 1
+            }
+          ],
+          "chosenAction": {
+            "type": "stop"
+          },
+          "chosenActionProbability": 1,
+          "stopProbability": 1
+        }
+      ],
+      "firedNodes": [
+        "bn_40502fac-df0",
+        "bn_0e867ad3-a44",
+        "bn_7aa03640-409",
+        "bn_56d0d6a0-bf5"
+      ],
+      "vetoedNodes": [],
+      "contextChars": 391,
+      "footer": "Brain · 1 seeds · start bn_40502fac-df0 · 4 hops · 4 fired · 0 veto · 391 chars",
+      "createdAt": 1773635212770
+    },
+    "chosenSeed": {
+      "nodeId": "bn_40502fac-df0",
+      "priorScore": 0.7326886480086391,
+      "learnedSeedWeight": 0,
+      "policyScore": 0.7326886480086391,
+      "probability": 0.9999999999986446,
+      "chosen": true
+    },
+    "finalSectionOrder": [
+      "correction_cards",
+      "route_selected_evidence",
+      "toolcards_and_workflows",
+      "transcript_support"
+    ]
+  }
+}