---
name: openclaw-agent
description: Use when adapting Living IP decision-engine agents, skills, tools, prompt files, or no-secret workflows to OpenClaw agent workspaces.
---

# OpenClaw Agent

Use this skill to package Living IP decision-engine behavior for OpenClaw workspaces. Treat OpenClaw as a distribution/runtime surface, not a new source of truth.

## Current External Surface

As of 2026-06-01, the upstream OpenClaw README describes:

- Node 24 or Node 22.19+ runtime;
- `openclaw onboard --install-daemon`;
- Gateway daemon usage;
- agent prompt files `AGENTS.md`, `SOUL.md`, and `TOOLS.md`;
- workspace skills at `~/.openclaw/workspace/skills/<skill>/SKILL.md`;
- model configuration in OpenClaw config;
- security guidance for DM pairing, allowlists, and sandboxing.

Verify upstream docs before depending on a command in code.

## Living IP Workspace Shape

Create or update:

- `AGENTS.md`: scope, repo boundaries, proof requirements;
- `SOUL.md`: Rio or Theseus identity;
- `TOOLS.md`: bounded tools only;
- `<openclaw-workspace>/skills/decision-engine-refinement/SKILL.md`;
- `<openclaw-workspace>/skills/living-ip-kb-interop/SKILL.md`;
- `<openclaw-workspace>/skills/teleo-db-operator/SKILL.md` only for read-only
  local copies unless explicitly authorized.

## Tool Policy

Default allow:

- read files;
- run local fixture tests;
- write proof artifacts;
- inspect git diffs;
- query copied SQLite DBs read-only.

Default deny:

- production DB writes;
- token reads;
- Bitwarden vault export;
- live GitHub PR comments;
- public messaging sends;
- broad shell automation against host services.

## Rio And Theseus

- Rio OpenClaw package: economic reasoning, contribution incentives, paid-query guardrails, OPSEC.
- Theseus OpenClaw package: eval integrity, adversarial prompts, model bakeoffs, self-upgrade review.

## Proof Contract

An OpenClaw adapter is useful only if it can run a fixture and produce:

- prompt files used;
- tool allowlist;
- model selected;
- fixture input;
- structured verdict output;
- proof that no denied tools were invoked.

Do not claim OpenClaw production readiness until the package runs in an OpenClaw workspace and writes proof.
