cron-wrapper-audit

To audit launch agent plists for cron wrapper compliance, scan ai.openclaw and ai.gbrain plist files to verify each job routes through the skill-wrapper path. This weekly check enforces the cron-thin-trigger-skill-does-work rule and identifies any bypasses.

When a cron job bypasses the skill-wrapper path, the audit detects the violation and emits a consolidated Drift incident. This reports the issue so it becomes visible and actionable for operational teams to correct.

Yes, the cron wrapper audit recognizes a documented allow-list of exceptions. Long-running daemons and internal observability jobs are permitted to bypass the skill-wrapper path without triggering a Drift violation.

You can check ai.openclaw and ai.gbrain cron configurations for wrapper drift by running an audit that inspects plists and validates them against the allow-list. It emits a Drift incident for any mismatched or unauthorized bypasses.

You can automate weekly compliance checks for launch agents by running the audit against ai.openclaw and ai.gbrain plists. It verifies skill-wrapper routing, validates exceptions, and emits Drift incidents for any new violations.