fix(shields): self-heal root-owned mutable OpenClaw config on boot - #6307

Merged

apurvvkumaria merged 13 commits into

mainfrom

fix/openclaw-config-perms-self-heal

Jul 7, 2026

Commits on Jul 6, 2026

fix(shields): self-heal root-owned mutable OpenClaw config on boot

laitingsheng
and
claude
committed
019a889
fix(shields): close TOCTOU window in collapsed config reclaim

laitingsheng
and
claude
committed
19ec64c

Commits on Jul 7, 2026

fix(shields): make collapsed-config classify-and-reclaim atomic
laitingsheng
committed
7fa0598
Merge remote-tracking branch 'origin/main' into fix/openclaw-config-perms-self-heal
laitingsheng
committed
8aed13f
fix(test): keep nemoclaw-start.test.ts within its legacy line budget
laitingsheng
committed
a585660
fix(shields): exclude the recovery baseline from generic reclaim
laitingsheng
committed
b5e0007
fix(shields): fail closed on root config reclaim
apurvvkumaria
committed
2e64a30
test(shields): prove root config reclaim boundary
apurvvkumaria
committed
a2416bf
docs(security): document root config recovery boundary
apurvvkumaria
committed
232b9a5
merge: sync origin/main into #6307 fix
apurvvkumaria
committed
ceecd98
test(shields): keep replacement checks linear
apurvvkumaria
committed
4c58c65
test(shields): add issue refs to seal cases
apurvvkumaria
committed
9d5c2a2
test(shields): require both sealed config files
apurvvkumaria
committed
c73ef23