2026-07-30 · OpenClaw adapter

OpenClaw Adapter 1.0.18

• Free dexgate-assess always runs a packaged representative-action policy self-check and a best-effort OpenClaw/plugin environment inspect (no claim of live agent-turn interception from PASS alone).
• Self-check can upload a sanitized package result to Dexgate and receive a server-issued claim URL (≥128-bit token); environment fields are not included in the claim. On claim-service failure, saves locally under ~/.dexgate/ instead of printing a nonfunctional URL.
• Overall CLI status may be PASS / FAIL / PARTIAL; governed may reflect configured/connected signals (not a live Passport decision).
• Exit 0 when assessment completes (even if not protected); nonzero only on CLI failure.
• Paired Decision Middleware pin on site docs: @dexgate/decision-middleware@0.1.1.
• Updated the Compatibility Matrix and quickstart to @dexgate/openclaw-trusted-mode@1.0.18.

npm package 1.0.18 · decision-middleware 0.1.1 · quickstart · compatibility matrix

2026-07-29 · Codex adapter

Codex Adapter 0.1.16

• Published @dexgate/codex-trusted-mode@0.1.16 as the public latest pin.
• Synced packaged codex.integration.json version with package.json (was stuck at 0.1.0 on earlier tarballs).
• Config-contract gate now requires integration manifest + plugin manifest versions match the package.
• Includes multi-turn governed session CLI, agent-message capture fix, and hermetic bridge CLI tests.
• Updated the Compatibility Matrix and Codex quickstart pin to 0.1.16.

npm package 0.1.16 · quickstart · compatibility matrix

2026-07-29 · OpenClaw adapter + Decision Middleware

OpenClaw Adapter 1.0.17

• Added opt-in toolPolicyMode: "MIDDLEWARE" governed path: OpenClaw → Decision Middleware (POST /v1/decide) → licensed Dexgate runtime.
• Default remains free ALLOWLIST_ONLY (local, offline, no network).
• Forwards per-request tenant_id and gateway_id on the middleware context (overrides process defaults on the middleware).
• Documented optional pdpAuthToken on the plugin config schema (runtime/CLI already supported).
• Paired with public @dexgate/decision-middleware@0.1.0 (no hard npm dependency; HTTP optional).
• Updated the Compatibility Matrix and quickstart to @dexgate/openclaw-trusted-mode@1.0.17.

npm package 1.0.17 · decision-middleware · quickstart · compatibility matrix

2026-07-29 · Decision Middleware

Decision Middleware 0.1.0 (first public release)

• Published @dexgate/decision-middleware@0.1.0 — HTTP /v1/decide + library API over the licensed Dexgate runtime (contract v0.1).
• Optional per-request context.tenant_id / context.gateway_id routing (context overrides env defaults).
• Source: github.com/dexgate-ai/decision-middleware.

npm package 0.1.0 · OpenClaw middleware path

2026-07-27 · OpenClaw adapter

OpenClaw Adapter 1.0.16

• Added opt-in paid-activation milestones (after a successful licensed-runtime ENFORCED_OK check; free assess does not emit them).
• Added registered installation identifiers and workspace binding (Dexgate-issued install id + telemetry-only secret; console bind via telemetry_install_id).
• Added signed first-governed-decision and subsequent-activation signals (second-governed-decision on a later calendar day).
• Preserved telemetry-off behavior by default (requires DEXGATE_TELEMETRY_OPT_IN=1).
• Excluded action payloads, source code, credentials, claim tokens, and raw policy evidence from telemetry.
• Pinned as @dexgate/openclaw-trusted-mode@1.0.16 (superseded by 1.0.17 for MIDDLEWARE path).

npm package 1.0.16 · quickstart · telemetry · compatibility matrix

2026-07-27 · Platform + telemetry

Paid-activation telemetry integrity (DG-GTM-002)

• Public adapter telemetry remains documented, but paid-activation events require a Dexgate-issued install id and HMAC signature.
• Opt-in header alone cannot manufacture first_governed_decision for nonexistent or unpaid workspaces.
• Strict event schemas, rate limits, unique eventId replay protection, and server-derived plan/paid status.
• Telemetry credentials are separate from runtime credentials.
• CLI support: @dexgate/openclaw-trusted-mode@1.0.16+ (register + sign); current matrix pin is 1.0.18.

telemetry docs · installations POST /api/telemetry/installations/

2026-07-27 · OpenClaw adapter

OpenClaw Adapter 1.0.15

• Hardened privacy-safe paid-activation measurement for opted-in CLI usage (DG-REL-001).
• Emits first_governed_decision only after an authenticated successful licensed-runtime check (ENFORCED_OK).
• Adds second_governed_decision with same-day deduplication across calendar days.
• Free local assess cannot emit paid-activation events; local/unauthenticated runtimes cannot either.
• Excludes action payloads, source code, claim tokens, credentials, and raw evidence.
• Pinned publicly as @dexgate/openclaw-trusted-mode@1.0.15 (superseded by 1.0.16 for telemetry integrity).

npm package 1.0.15 · telemetry

2026-07-27 · OpenClaw adapter

OpenClaw Adapter 1.0.14

• Added privacy-safe paid-activation measurement for opted-in CLI usage (DG-GTM-001).
• Added first_governed_decision emit after successful licensed-runtime validation (ENFORCED_OK).
• Excluded action payloads, source code, claim tokens, credentials, and raw evidence from telemetry.
• Published as @dexgate/openclaw-trusted-mode@1.0.14 on npm (superseded by later pins for activation-gate and telemetry integrity).

npm package 1.0.14 · telemetry

2026-07-26 · OpenClaw adapter

OpenClaw Adapter 1.0.13

• Added enforcementPosture and runtimeMode configuration terminology (fail-closed, lockdown, unsupported).
• Deprecated certificationStatus (still accepted with a deprecation notice; config dual-writes both fields for compatibility).
• Updated compatibility-matrix and quickstart version pins to @dexgate/openclaw-trusted-mode@1.0.13.
• Improved paid-runtime configuration guidance on the OpenClaw quickstart.
• Optional telemetry no longer includes claim tokens.

npm package 1.0.13 · quickstart · compatibility matrix

2026-07-26 · OpenClaw adapter

OpenClaw Adapter 1.0.12

• Added a claimable first-run risk assessment (dexgate-assess / openclaw-local-hardening-check).
• Improved production-runtime connection guidance after free success.
• Clarified supported free-mode execution coverage for the free local hard gate (see Compatibility for current allowlists).
• Improved error guidance when a licensed runtime is not yet configured.

npm package · quickstart

2026-07-26 · Site

Compatibility matrix and free risk check onboarding

• Published a single public compatibility matrix for adapter status.
• Homepage and get-started now lead with a free risk check and claimable result path.
• Documented privacy-safe optional telemetry at /docs/telemetry/.

2026-07-20 · OpenClaw adapter

OpenClaw Adapter 1.0.10–1.0.11

• Pinned public quickstart install to the current npm latest.
• Improved free-to-paid continue steps on the OpenClaw quickstart.

2026-07-19 · Codex adapter

Codex Adapter 0.1.x

• Published free and hosted-runner packages on npm for controlled host coverage.
• Documented hosted-runner paid path (not interactive unrestricted execution).

Codex quickstart · compatibility