mesh-policy-enforcer

Policy enforcement across OpenClaw orchestrations is handled by configuring policy profiles that define trusted devices, disallowed destinations, and per-device tool allowances to prevent unsafe task routing.

Device guardrails are pre-dispatch checks that validate destination trust, task sensitivity, and required tools before execution. They operate on a deny-by-default basis to block unauthorized sensitive tasks.

Yes, sensitive-task pinning restricts critical operations to trusted devices only. Emergency isolation capabilities allow you to immediately quarantine devices and halt unsafe workflows when violations occur.

Audit output is generated automatically during pre-dispatch checks and enforcement actions. It records policy profile evaluations, denied task routing attempts, and escalation events for compliance tracking.

Yes, the guardrails implement a deny-by-default model that blocks untrusted task routing automatically. When pre-dispatch checks fail, explicit escalation paths route the task or alert administrators for review.