openclaw
eb4a3adb3f
- Add agent context isolation API, RBAC, resolver, audit, dashboard modules - Deploy context isolation policy config - Fix OpenAPI workspace permissions (chown aiman:gitops) - Update ChatGPT actions API with new internals - Add CMD files for group/owner isolation and permission fix - Archive completed command files
33 lines
779 B
Markdown
33 lines
779 B
Markdown
# CMD-20260709-enable-group-owner-agent-isolation
|
|
|
|
## Goal
|
|
|
|
Deploy multi-user agent context isolation:
|
|
|
|
- group main agent per group/tenant
|
|
- dedicated owner agent per owner
|
|
- user profile and session overlays
|
|
- no user personalization in shared USER.md
|
|
|
|
## Deploy
|
|
|
|
1. Deploy context resolver.
|
|
2. Enable group agent routing.
|
|
3. Enable owner agent routing.
|
|
4. Create runtime user profile storage.
|
|
5. Migrate user-specific preferences out of shared USER.md.
|
|
6. Enable context audit events.
|
|
|
|
## Validation
|
|
|
|
- AIOS_USER_PROFILE_ISOLATION_READY
|
|
- AIOS_GROUP_AGENT_ROUTING_READY
|
|
- AIOS_OWNER_AGENT_READY
|
|
- AIOS_CONTEXT_AUDIT_READY
|
|
|
|
## Governance
|
|
|
|
- Safety policy overrides all user customization.
|
|
- No cross-user profile access.
|
|
- No personal profile data in shared Git configuration.
|