Canonical markdown: architecture/OPENCLAW_CONTROL_PLANE.md. This rendered HTML page is supplemental reference only.

OpenClaw Control Plane

Last Updated: 2026-03-12

Current Control Shape

• The OpenClaw bridge owns session-key construction, role/capability derivation, and secret refusal/redaction behavior.
• OpenClaw has separate chat and memory-search lanes.
• The bounded compat path introduced in PR #443 is gated by ENABLE_GUARD_CORE_COMPAT.
• OpenClaw is an assistant/copilot layer, not the final governance authority.

Current Boundaries

• User-assistant and admin-observer behavior are active.
• Admin-planner behavior is partial and advisory.
• Admin-operator behavior remains future scope and requires stronger control contracts.

Related Public References

• OpenClaw Control Plane Visual
• OpenClaw Memory Architecture
• Role and Capability Matrix
• OpenClaw Runtime Operations