openclaw - 💡(How to fix) Fix [Feature]: Intelligent gateway

Summary

Add opt-in channel admission policies for scoped public/allowlisted assistants

Problem to solve

Allowlisted senders currently get full agent dispatch. Prompt-only restrictions can fail, as seen when a non-admin WhatsApp sender asked for tech news and the agent answered. Clever prompting could lead the agent to comply potentially compromising security of the owner. Also unnecessary avoids token use for unrelated prompts or queries.

Proposed solution

Add opt-in admissionPolicy / serviceScope config to channel ingress:

• admin bypass
• services with descriptions/examples
• local keyword/example matching first
• reject by default on uncertainty
• optional future semantic/model classifier

Alternatives considered

Prompt-only restrictions as stated above, have failed multiple times and lead to unnecessary token consumption since message reach the agent.

Impact

• Reduced token consumption for businesses providing services
• Tight layer of security
• Reliability

Evidence/examples

No response

Additional information

Example config:

{ "channels": { "whatsapp": { "admissionPolicy": { "enabled": true, "mode": "local", "defaultDecision": "reject", "adminBypass": ["+1 (877) …"], "services": [ { "id": "meal-reservations", "description": "meal reservations and reservation status", "allowExamples": [ "reserve my meals", "check my reservation", "cancel tomorrow's lunch" ], "denyExamples": [ "latest tech news", "write code", "general questions" ] } ] } } } }