Overview
jhf-openclaw-env is the environment and runtime-operations owner for
Helpifyr OpenClaw deployments. It defines environment truth at the contract and
verification layer and keeps host behavior deterministic across issue-driven
changes.
Scope
This repository covers:
- Runtime contracts for host/app health, runtime auth topology, and guardrails
- Live verification scripts and reconcile flows
- Environment evidence and operator runbook material
- QA-facing machine-readable feature registry
This repository does not cover:
- OpenClaw product feature implementation
- General-purpose infrastructure platform ownership
- Long-term secret management product behavior
Runtime Ownership Model
- Contract truth:
config/contracts/*.json - Runtime and verify implementation:
scripts/*.sh,scripts/*.py,maintenance/*.py - Documentation and runbooks:
docs/*.md - Evidence ledger:
docs/LIVE_OPERATIONS_LOG.md
Primary Runtime Surfaces
- Host preflight and post-change validation lanes
- Reconcile guardrails for dockerd incidents and service drift
- SSO-v4 env-auth and proxy-auth topology checks
- Local admin quarantine and future-surface admission gates
- Runtime projection executor contract and observation policies
QA and Feature Registry
Feature-level QA truth is maintained in
MODULE_FEATURES.md (docs/MODULE_FEATURES.md). Each feature block includes stable
feature IDs, dependencies, contracts, failure modes, and test paths for
automation.
Related Docs
- OPERATIONS.md
- STACK_RUNTIME_CONTRACT.md (
docs/STACK_RUNTIME_CONTRACT.md) - INTEGRATIONS.md
- AUTONOMOUS_BACKLOG.md (
docs/AUTONOMOUS_BACKLOG.md) - PUBLIC_VS_INTERNAL_CONTENT.md (
docs/PUBLIC_VS_INTERNAL_CONTENT.md)
Release Admission Posture
This repository is a stack-nightly candidate, but it is not yet admitted for a
public nightly. The current owner-bounded release posture is
pending_history_scan, with release-facing surfaces constrained by
contracts/admission/release_surface_inventory_v1.json. The active owner
follow-up for this posture is JaddaHelpifyr/jhf-openclaw-env#1844.
Repo-owned history evidence now runs through
python scripts/verify_repository_history_posture.py and currently proves
filtered_publication_required.
The deterministic filtered bundle is built from a clean exact-main checkout
only and remains preparation evidence until Weaver records admission.
License: AGPLv3 Project: https://helpifyr.com
Docs Platform v1.6 Base Family
README.mddocs/OVERVIEW.mddocs/INSTALL.mddocs/CONFIGURATION.mddocs/OPERATIONS.mddocs/TROUBLESHOOTING.mddocs/RELEASE_NOTES.mddocs_manifest.yml