Control online

Cloudflare

State: Durable Object
Placement: provider adapters
Content capture: off

ID OpenClaw identityAccess verified

Fleet composition / Cloud control

Fleet

Create child core

New claw

Claw name Intended user subject Intended user label Identity source Deployment target Appliance profile Inference model Slack ingress Direct messages Group visibility Child log level

One claw, one core.Creates a dedicated Gateway, state root, pairing store, and OS identity. Nothing is cloned from another claw.

Generation-fenced rollout

Apply policy

A

Managed fieldsInference, native DM/group access, and child log level

B

Never changesCredentials, OAuth, pairing, sessions, memory, agent directories

Policy Version Canary

Target claws

Select a policy and target claws, then preview the field-level changes.

Immutable managed policy

New policy

Each save creates an immutable version. Applying an older version is the rollback path. Secrets and identity state are outside the policy boundary.

Policy name Description Primary model Fallback models Slack ingress Direct-message visibility Group visibility Child log level

Native access onlyVisibility is expressed through each child’s existing OpenClaw DM pairing and group allowlist settings. Crabhelm adds no parallel user ACL.

Unverified batch create

Add maintainer labels

Paste one GitHub-style label per line. These labels are not verified against GitHub and use manual identities; use authenticated GitHub import for stable numeric identities. Native user pairing still happens inside each child.

Maintainer labels

Deployment target Appliance profile Inference model Slack ingress Direct messages Group visibility Child log level

Partial successEach claw is independently persisted and reconciled. Failed handles remain visible in the result; successful claws are not rolled back.

Authenticated member discovery

Import from GitHub

Preview organization members, a team, or repository maintainers. GitHub numeric IDs become stable intended-user identities; no GitHub credentials are copied into child cores.

Organization Source Team slug Organization role

Preview the source before choosing recipients.

Deployment target Appliance profile Inference model Slack ingress Direct messages Group visibility Child log level

Identity stays explicit.Import creates desired child cores. Slack requests route only after an administrator binds a persona to a workspace and channel.

Requester / persona / actor

New persona

Name Kind Owner Runtime claw Actor policy Service actor Slack workspace ID Slack channel ID Capabilities

Identity Operating principles Managed instructions

Authority is platform policy.Profile assistants always act as the invoker. Slack routing requires both workspace and channel IDs. Shared service authority requires an explicit service principal and compatible connection.

Reviewed read-only capability

Submit skill

Name Departments Description SKILL.md

Two-step governance.Submission creates a draft. An administrator must approve it before any persona can receive it.