Waku 与 OpenClaw 通过同一公共合同获得不同权限

Waku 与 OpenClaw 通过同一公共合同获得不同权限 由 Archify 生成的架构图。 Waku Agent · Session / model / tools / chat · External Agent hosts · host-owned Waku Agent Session / model / tools / chat host-owned Waku Runtime Glue · begin → retrieve → complete · External Agent hosts · proposal + read Waku Runtime Glue begin → retrieve → complete proposal + read OpenClaw · Skills / tools / sandbox · External Agent hosts · host-owned OpenClaw Skills / tools / sandbox host-owned Context Recall Skill · fixed CLI + bounded query · External Agent hosts · memory:read only Context Recall Skill fixed CLI + bounded query memory:read only Public Python SDK · installed wheel / typed contracts · 架构组件 · no private imports Public Python SDK installed wheel / typed contracts no private imports Foundation HTTP API · prepare / govern / status · Agent Foundation authority boundary Foundation HTTP API prepare / govern / status Registration Authority · namespace / principal / exact scopes · Agent Foundation authority boundary · server re-read Registration Authority namespace / principal / exact scopes server re-read Context + Memory Authority · bounded recall / proposal / receipt · Agent Foundation authority boundary Context + Memory Authority bounded recall / proposal / receipt Owner Review Control Plane · separate memory:review principal · Agent Foundation authority boundary · never in Agent host Owner Review Control Plane separate memory:review principal never in Agent host PostgreSQL / local store · Registration + governed state · Agent Foundation authority boundary PostgreSQL / local store Registration + governed state public Session seam TurnEnvelope + typed Observation native Skill invocation query only typed HTTP revalidate principal + scopes authorized capability prepare / proposal approve / reject state + receipt immutable decision External Agent hosts Agent Foundation authority boundary 图例 前端 后端 数据库 云服务 安全 外部系统

Waku

  • • 保留原生 chat/session 行为
  • • 只有 adopter callback 的 typed Observation 进入治理
  • • Agent 进程没有 review credential

OpenClaw

  • • Skill 只调用 public prepare/read 合同
  • • allowlist 只控制可见性，不等于 shell authorization
  • • Foundation unavailable 时显式 degraded，不伪造 Context

共同边界

  • • 模型与 provider credentials 留在宿主
  • • Registration 和语义权威留在 Foundation
  • • MCP、模型质量与生产 IAM 均不由此证明