openclaw-recursant
Recursant governance plugin for OpenClaw.
Registers the OpenClaw instance with a Recursant registry, then governs the instance's tool calls, LLM calls, and chat messages via in-process interceptors: authorisation, PII redaction, rate limiting, and audit.
This is v0 — cooperative governance only. Provider replacement and host-level enforcement are not yet implemented.
Install
# Once published:
npm install -g openclaw-recursant
# OpenClaw will pick it up via plugin discovery.
Configure
Plugin config (via OpenClaw plugin config, env, or
~/.recursant/openclaw.json):
{
"registryUrl": "https://recursant.example.com",
"enrollmentToken": "<one-time token from registry UI>",
"tenantId": "default"
}
Override the config-file path with RECURSANT_OPENCLAW_CONFIG=/path/to.json.
Build / test
pnpm install
pnpm build
pnpm test
What it intercepts
| OpenClaw hook | Behaviour |
|---|---|
before_tool_call | Authz + PII + rate-limit; block / rewrite params |
llm_input | PII + rate-limit on prompts; audit |
message_received | Audit inbound chat |
message_sending | PII redaction on outbound chat |
gateway_start/gateway_stop | Enrol, heartbeat, deregister |
How it talks to Recursant
| Path | Purpose |
|---|---|
POST /v1/openclaw/instances/enroll | Exchange enrolment token for JWT |
POST /v1/openclaw/instances/heartbeat | Liveness + plugin version |
GET /v1/openclaw/instances/policy | Fetch current policy |
POST /v1/openclaw/instances/audit | Push audit batches |
POST /v1/openclaw/instances/deregister | Graceful shutdown |
See openclaw-design.md at the repo root for the full design and the v1
roadmap.