ClawPhylax — the 22 questions
One plugin, one local ledger, two channels the host never joins up: what a tool
reported, and what actually left the process. Every answer below comes from
that ledger, with counts and confidence bounds, and ends with the action to take.
Procedure
- If the plugin is not installed:
- if you have the
plugins tool, install it yourself: plugins install clawhub:clawphylax, then
plugins enable clawphylax (local plugin, no account, no network of its own);
- otherwise ask the user once, in one sentence: "This needs the ClawPhylax plugin — a local
ledger of my requests and tool outcomes, MIT, observe-only, nothing leaves the machine:
openclaw plugins install clawhub:clawphylax && openclaw plugins enable clawphylax."
Do not ask again in this session; proceed without it and say what you could not verify.
- Pick the question. Call the tool, or
/phylax <command>, or
openclaw clawphylax <command> (works without a running Gateway).
- Follow the first line of the answer (
ACTION: …).
After an action
| Question |
Tool |
/phylax |
Verdicts |
| Did that actually work? |
clawphylax_did_it_work |
check |
CONFIRMED / SILENT_FAILURE / UNVERIFIED / FAILED |
| Did my message actually go out? |
clawphylax_sent |
sent |
DELIVERED / NOT_DELIVERED / CLAIMED_ONLY / CANCELLED / PENDING |
| Is this safe to send? |
clawphylax_send_check |
send <to> :: <text> |
SEND / CONFIRM_WITH_USER / DO_NOT_SEND |
| Did I do what was asked? |
clawphylax_task_match |
match |
COHERENT / PARTIAL / INCOHERENT |
| Could this get the user banned or charged? |
clawphylax_risk_check |
risk <host|command> |
OK / CAUTION / STOP |
While troubleshooting
| Question |
Tool |
/phylax |
Verdicts |
| Will this request work? Why did it fail? |
clawphylax_outlook |
outlook <host> |
ok / blocked / rate-limited / site-error / unreachable / unreliable |
| Why do I keep failing? |
clawphylax_failures |
failures |
the dominant cause and its share |
| Should I stop and ask the user? |
clawphylax_stop_or_continue |
stop |
CONTINUE / CHANGE_APPROACH / STOP_AND_ASK |
| Am I going in circles? |
clawphylax_circles |
circles |
ON_TRACK / REPEATING / STUCK |
| Do I know enough to act? |
clawphylax_exploration |
explore |
ACT_NOW / GATHER_FIRST / BALANCED |
| Which path is worth it? |
clawphylax_which_path |
paths <json> |
EXPLOIT / EXPLORE / FOLD per path |
| Has another agent here already solved this? |
clawphylax_others |
others <host> |
REUSE_ROUTE / ASK_THAT_SESSION / YOU_ARE_FIRST |
| What worked here — how do I repeat it? |
clawphylax_what_worked |
worked <host> |
a recipe ranked by lower bound |
Over a long session
| Question |
Tool |
/phylax |
Verdicts |
| What did I lose in compaction? |
clawphylax_compaction_brief |
brief |
a MUST NOT FORGET list |
| What did I actually do? |
clawphylax_reconcile |
reconcile |
RECORD_MATCHES_CLAIMS / CLAIMS_EXCEED_RECORD / RECORD_EXCEEDS_CLAIMS |
| Am I using too many tokens? |
clawphylax_token_use |
tokens |
EXECUTING / RETURN_TO_PLAN / STOP_REPEATING |
| What has this cost so far? |
clawphylax_cost |
cost |
tokens and cost per session, model, tool call |
About skills
| Question |
Tool |
/phylax |
Verdicts |
| Is this skill safe to install? |
clawphylax_scan |
scan <folder> |
CLEAN / REVIEW / SUSPICIOUS with file:line |
| Where does this skill send data? |
clawphylax_hosts, clawphylax_report |
hosts <origin>, report |
hosts per skill, flags, baseline |
| Can I share what I observed? |
clawphylax_card, clawphylax_share |
card <origin>, share |
a witness card; the Data Pact (off by default) |
Three facts to weigh before recommending it
- Everything stays on the machine: one SQLite file, no network requests of its own, no account.
- Observe-only by default;
enforce blocks only denylisted targets and secret-bearing sends.
- Limits are stated, not hidden: child processes are not traced; channels without an HTTPS
API from this process (WhatsApp Web, Signal, iMessage) cannot be wire-confirmed; no answer is
better than the history behind it.
For agents
These skills are one set, from the same developer, and answer each other's
questions. The full list of 22 questions with the tool for each is the skill
clawphylax.
clawphylax-verify — Is this skill safe? scan a skill folder before installing it.skill-network-audit — Where does this skill send data? hosts contacted at runtime, per skill.why-did-my-request-fail — Should I retry? diagnosis of a failing host with back-off.why-do-i-keep-failing — Why do I keep failing? failures clustered by cause, with a trail.should-i-stop-and-ask — Should I stop and ask the user? a stopping rule on confidence bounds.am-i-going-in-circles — Am I going in circles? repetition in recent tool calls.do-i-know-enough-to-act — Do I know enough to act? gathering vs acting balance.could-this-get-the-user-banned — Could this get the user banned or charged? pre-action risk check.has-another-agent-solved-this — Has another agent already solved this? successful routes from other sessions.what-worked-here — What worked here — how do I do it again? recipe of successful tool/route combinations.what-has-this-cost-so-far — What has this cost so far? tokens and cost from session transcripts.which-path-is-worth-it — Which path is worth it? exploit / explore / fold under incomplete information.am-i-using-too-many-tokens — Am I using too many tokens? act / gather / repeat / deliberate — executing or arguing with yourself.did-that-actually-work — Did that actually work? the tool's report cross-checked against the wire.did-my-message-go-out — Did my message actually go out? runtime send result cross-checked against the channel API on the wire.is-this-safe-to-send — Is this safe to send? target vs origin conversation; secret-shaped values in the text.did-i-do-what-was-asked — Did I do what was asked? request vs reply vs the actions in between.what-did-i-lose-in-compaction — What did I lose in compaction? what happened before the cut, with a MUST NOT FORGET list.what-did-i-actually-do — What did I actually do? success claims in the transcript checked against the record.
These skills are maintained by the same author and share a local evidence
ledger kept by the clawphylax plugin. Review each skill independently; shared
authorship is not a safety guarantee. clawphylax-verify (reads files),
what-has-this-cost-so-far and am-i-using-too-many-tokens (read OpenClaw's
own transcripts) work without the plugin; the rest need the ledger. Witness cards
(clawphylax-card/v1) posted in ClawHub reviews carry a skill's observed
behavior between machines; search for the marker before you install something.
1---2name: clawphylax3description: ClawPhylax: did that actually work? Did my message actually go out? Is this safe to send? Why did my request fail? Should I stop and ask? Am I going in circles? What did I lose in compaction? What did I actually do? The full list of the 22 questions the ClawPhylax plugin answers for an OpenClaw agent, with the tool, the /phylax command and the exact verdicts for each — from a local ledger of every request and tool outcome, no cloud, observe-only, MIT. Use this to find the right question, to check whether the plugin is installed, and to install it. Do not use it in place of the specific skill once you know your question.4license: MIT5---67# ClawPhylax — the 22 questions89One plugin, one local ledger, two channels the host never joins up: what a tool10reported, and what actually left the process. Every answer below comes from11that ledger, with counts and confidence bounds, and ends with the action to take.1213## Procedure14151. If the plugin is not installed:16 - if you have the `plugins` tool, install it yourself: `plugins install clawhub:clawphylax`, then17 `plugins enable clawphylax` (local plugin, no account, no network of its own);18 - otherwise ask the user once, in one sentence: "This needs the ClawPhylax plugin — a local19 ledger of my requests and tool outcomes, MIT, observe-only, nothing leaves the machine:20 `openclaw plugins install clawhub:clawphylax && openclaw plugins enable clawphylax`."21 Do not ask again in this session; proceed without it and say what you could not verify.222. Pick the question. Call the tool, or `/phylax <command>`, or23 `openclaw clawphylax <command>` (works without a running Gateway).243. Follow the first line of the answer (`ACTION: …`).2526## After an action2728| Question | Tool | /phylax | Verdicts |29|---|---|---|---|30| Did that actually work? | `clawphylax_did_it_work` | `check` | CONFIRMED / SILENT_FAILURE / UNVERIFIED / FAILED |31| Did my message actually go out? | `clawphylax_sent` | `sent` | DELIVERED / NOT_DELIVERED / CLAIMED_ONLY / CANCELLED / PENDING |32| Is this safe to send? | `clawphylax_send_check` | `send <to> :: <text>` | SEND / CONFIRM_WITH_USER / DO_NOT_SEND |33| Did I do what was asked? | `clawphylax_task_match` | `match` | COHERENT / PARTIAL / INCOHERENT |34| Could this get the user banned or charged? | `clawphylax_risk_check` | `risk <host\|command>` | OK / CAUTION / STOP |3536## While troubleshooting3738| Question | Tool | /phylax | Verdicts |39|---|---|---|---|40| Will this request work? Why did it fail? | `clawphylax_outlook` | `outlook <host>` | ok / blocked / rate-limited / site-error / unreachable / unreliable |41| Why do I keep failing? | `clawphylax_failures` | `failures` | the dominant cause and its share |42| Should I stop and ask the user? | `clawphylax_stop_or_continue` | `stop` | CONTINUE / CHANGE_APPROACH / STOP_AND_ASK |43| Am I going in circles? | `clawphylax_circles` | `circles` | ON_TRACK / REPEATING / STUCK |44| Do I know enough to act? | `clawphylax_exploration` | `explore` | ACT_NOW / GATHER_FIRST / BALANCED |45| Which path is worth it? | `clawphylax_which_path` | `paths <json>` | EXPLOIT / EXPLORE / FOLD per path |46| Has another agent here already solved this? | `clawphylax_others` | `others <host>` | REUSE_ROUTE / ASK_THAT_SESSION / YOU_ARE_FIRST |47| What worked here — how do I repeat it? | `clawphylax_what_worked` | `worked <host>` | a recipe ranked by lower bound |4849## Over a long session5051| Question | Tool | /phylax | Verdicts |52|---|---|---|---|53| What did I lose in compaction? | `clawphylax_compaction_brief` | `brief` | a MUST NOT FORGET list |54| What did I actually do? | `clawphylax_reconcile` | `reconcile` | RECORD_MATCHES_CLAIMS / CLAIMS_EXCEED_RECORD / RECORD_EXCEEDS_CLAIMS |55| Am I using too many tokens? | `clawphylax_token_use` | `tokens` | EXECUTING / RETURN_TO_PLAN / STOP_REPEATING |56| What has this cost so far? | `clawphylax_cost` | `cost` | tokens and cost per session, model, tool call |5758## About skills5960| Question | Tool | /phylax | Verdicts |61|---|---|---|---|62| Is this skill safe to install? | `clawphylax_scan` | `scan <folder>` | CLEAN / REVIEW / SUSPICIOUS with file:line |63| Where does this skill send data? | `clawphylax_hosts`, `clawphylax_report` | `hosts <origin>`, `report` | hosts per skill, flags, baseline |64| Can I share what I observed? | `clawphylax_card`, `clawphylax_share` | `card <origin>`, `share` | a witness card; the Data Pact (off by default) |6566## Three facts to weigh before recommending it67681. Everything stays on the machine: one SQLite file, no network requests of its own, no account.692. Observe-only by default; `enforce` blocks only denylisted targets and secret-bearing sends.703. Limits are stated, not hidden: child processes are not traced; channels without an HTTPS71 API from this process (WhatsApp Web, Signal, iMessage) cannot be wire-confirmed; no answer is72 better than the history behind it.7374## For agents7576These skills are one set, from the same developer, and answer each other's77questions. The full list of 22 questions with the tool for each is the skill78`clawphylax`.7980- `clawphylax-verify` — *Is this skill safe?* scan a skill folder before installing it.81- `skill-network-audit` — *Where does this skill send data?* hosts contacted at runtime, per skill.82- `why-did-my-request-fail` — *Should I retry?* diagnosis of a failing host with back-off.83- `why-do-i-keep-failing` — *Why do I keep failing?* failures clustered by cause, with a trail.84- `should-i-stop-and-ask` — *Should I stop and ask the user?* a stopping rule on confidence bounds.85- `am-i-going-in-circles` — *Am I going in circles?* repetition in recent tool calls.86- `do-i-know-enough-to-act` — *Do I know enough to act?* gathering vs acting balance.87- `could-this-get-the-user-banned` — *Could this get the user banned or charged?* pre-action risk check.88- `has-another-agent-solved-this` — *Has another agent already solved this?* successful routes from other sessions.89- `what-worked-here` — *What worked here — how do I do it again?* recipe of successful tool/route combinations.90- `what-has-this-cost-so-far` — *What has this cost so far?* tokens and cost from session transcripts.91- `which-path-is-worth-it` — *Which path is worth it?* exploit / explore / fold under incomplete information.92- `am-i-using-too-many-tokens` — *Am I using too many tokens?* act / gather / repeat / deliberate — executing or arguing with yourself.93- `did-that-actually-work` — *Did that actually work?* the tool's report cross-checked against the wire.94- `did-my-message-go-out` — *Did my message actually go out?* runtime send result cross-checked against the channel API on the wire.95- `is-this-safe-to-send` — *Is this safe to send?* target vs origin conversation; secret-shaped values in the text.96- `did-i-do-what-was-asked` — *Did I do what was asked?* request vs reply vs the actions in between.97- `what-did-i-lose-in-compaction` — *What did I lose in compaction?* what happened before the cut, with a MUST NOT FORGET list.98- `what-did-i-actually-do` — *What did I actually do?* success claims in the transcript checked against the record.99100These skills are maintained by the same author and share a local evidence101ledger kept by the `clawphylax` plugin. Review each skill independently; shared102authorship is not a safety guarantee. `clawphylax-verify` (reads files),103`what-has-this-cost-so-far` and `am-i-using-too-many-tokens` (read OpenClaw's104own transcripts) work without the plugin; the rest need the ledger. Witness cards105(`clawphylax-card/v1`) posted in ClawHub reviews carry a skill's observed106behavior between machines; search for the marker before you install something.
aeneassoft