tomevault-io Execution Isolation
Enforces filesystem, network, and command policies on all AI tool calls.
Configuration
Add to ~/.openclaw/openclaw.json:
{
"plugins": {
"execution-isolation": {
"enforcement": "block",
"defaultAction": "allow",
"filesystem": {
"readAllow": ["~/workspace", "/tmp", "~/.openclaw"],
"writeAllow": ["~/workspace", "/tmp"],
"deny": ["~/.ssh", "~/.aws", "~/.gnupg"]
},
"network": {
"allow": ["api.openai.com", "api.anthropic.com", "*.github.com"],
"deny": ["10.*", "192.168.*", "169.254.*"]
},
"commands": {
"allow": ["node", "python", "git", "pnpm", "npm", "curl"],
"deny": ["sudo", "chmod", "chown"]
}
}
}
}
Policy Precedence
- Deny rules always take precedence over allow rules
- Tool-specific overrides take precedence over global policy
- If no rules match,
defaultActiondetermines the outcome
Source: Yapie0/safe-openclaw — distributed by TomeVault.