tophant-clawvault-operator

You can manage ClawVault service lifecycle by sending deterministic start, stop, and status commands to control the local proxy and dashboard directly within OpenClaw agent sessions.

Scanning local files for hardcoded secrets and prompt-injection patterns is done by targeting text and files with the threat scanning operation to detect sensitive data and dangerous command attempts.

You can apply vault security presets and update configuration without restarting by using the dashboard REST API hot-patching behavior when the ClawVault dashboard service is running.

Validating OpenClaw file-guard plugin interception is done by performing an acceptance check via the dashboard event stream to verify the interception event chain functions correctly.

Running ClawVault day-to-day security operations requires the OpenClaw agent environment and the pyyaml dependency to handle configuration reads, writes, and vault preset rollouts.

The ClawVault operator supports dotted-key configuration reads and writes through config-get and config-set commands, allowing you to inspect and update values for guard mode enforcement changes.