oc_guard

# oc-guard Skill

## Purpose
All config-changing requests must go through `oc-guard`.
Do not directly edit `~/.openclaw/openclaw.json`.
When possible, invoke the bundled CLI at `{baseDir}/scripts/oc-guard.py`.

## Hard Rules
1. Use `oc-guard plan` before apply.
2. High-risk changes require `oc-guard apply --confirm`.
3. Always return execution receipt first.
4. If command is not executed, return `【模型说明-未执行】`.
5. Never claim success without a real `oc-guard` receipt.

## Common Commands
- `{baseDir}/scripts/oc-guard.py --help`
- `{baseDir}/scripts/oc-guard.py plan "<requirement>"`
- `{baseDir}/scripts/oc-guard.py apply --confirm "<requirement>"`
- `{baseDir}/scripts/oc-guard.py plan --proposal <file>`
- `{baseDir}/scripts/oc-guard.py apply --confirm --proposal <file>`

# oc-guard-skill

<p align="center">
  <img src="docs/readme_logo.png" alt="oc-guard mascot with security shield" width="960" />
</p>

## 公告 | Announcement

`oc-guard-skill` 已正式发布到 GitHub 与 ClawHub。  
This project is now publicly available on GitHub and ClawHub.

- 目标：防止 OpenClaw 配置被误改导致服务中断。  
  Goal: prevent OpenClaw outages caused by unsafe config edits.
- 机制：先 `plan`，后 `apply --confirm`，失败自动回滚。  
  Workflow: `plan` first, then `apply --confirm`, with automatic rollback on failure.

## 目录 | Table of Contents

- [简介 | Overview](#简介--overview)
- [工作流图 | Workflow Diagram](#工作流图--workflow-diagram)
- [功能 | Features](#功能--features)
- [包含文件 | Included Files](#包含文件--included-files)
- [不包含 | Not Included](#不包含--not-included)
- [前置依赖 | Prerequisites](#前置依赖--prerequisites)
- [安装 | Install](#安装--install)
- [环境变量覆盖 | Environment Overrides](#环境变量覆盖--environment-overrides)
- [使用方法 | Usage](#使用方法--usage)
- [输出协议 | Output Contract](#输出协议--output-contract)
- [发布后验收 | Post-publish Verification](#发布后验收--post-publish-verification)
- [安全说明 | Security Notes](#安全说明--security-notes)
- [标签与发布 | Tags and Releases](#标签与发布--tags-and-releases)
- [许可证 | License](#许可证--license)

## 简介 | Overview

OpenClaw 配置安全守卫工具。  
Safe config guard for OpenClaw.

- 用 `plan` 预览变更和风险。 / Use `plan` to preview changes and risk.
- 用 `apply --confirm` 执行高风险变更。 / Use `apply --confirm` for high-risk changes.
- 内置备份与回滚。 / Built-in backup and rollback.
- 输出中英并行执行回执。 / Bilingual execution receipts.

## 工作流图 | Workflow Diagram

<p align="center">
  <img src="docs/workflow.png" alt="oc-guard safe config workflow diagram" width="960" />
</p>

## 功能 | Features

- 自然语言转受控提案（`plan`） / Natural language to guarded proposal (`plan`)
- 高风险确认门槛（`apply --confirm`） / High-risk confirmation gate
- 校验渠道、绑定、ag...