# Local Hardening Baseline

## Purpose
Describe the standalone free-mode posture for the dexgate™ OpenClaw adapter without requiring the Dexgate policy runtime.

## Audience
- Self-serve OpenClaw users
- Security reviewers evaluating free plugin mode
- Teams deciding whether to start with local hardening before a paid pilot

## Default Free Posture (conservative allowlist)
Free adapters use **adapter-specific local hard gates with conservative read-only defaults**—not a broad “everyday coding” allowlist.

**OpenClaw (default `ALLOWLIST_ONLY`):**
- Allowed: `read_file`, `list_files`, `search_files` only (unless the operator expands the list)
- Blocked by default: shell, writes/edits/deletes, and other non-listed tools

**Codex (default free posture):**
- Allowed: conservative read-only shell from a fixed prefix allowlist, plus limited safe non-mutating tools the package documents
- Blocked by default: `apply_patch`, broad interpreters, chaining, redirection, and mutating commands

Exact free surfaces are on the [compatibility matrix](/compatibility/). Free mode does **not** mint a Passport and does **not** create org-wide governed decision records. Check output should show something like `governed: false` and `source: local-hardening` (or adapter-equivalent free baseline).

## What This Gives You
- Useful standalone hardening with no external policy runtime dependency
- Safer defaults that stay narrow until operators deliberately expand them
- Clear local blocking of high-risk and non-allowlisted actions

## What It Does Not Give You
- External PDP authorization
- Scoped Passports for protected executors
- Tenant or license entitlements
- Shared customer runtime dashboard governed action history
- Audit-grade governed traces and release evidence

## When To Upgrade
Upgrade to the paid pilot (Dexgate policy runtime) when you need:
- Shared monitor and record of governed action requests
- Deterministic allow / deny / constrain from an external authority
- Passport evidence and console decision history
- Managed policy lifecycle for production-bound change

## Validation Guidance
Reviewers should confirm:
- The adapter is installed and enabled so free allowlist policy applies in real sessions
- Optional `dexgate-assess`: package self-check plus best-effort OpenClaw/plugin inspect; packageSelfCheck PASS is not proof a real agent turn was intercepted; claim (if any) stores package self-check only
- High-consequence actions are blocked with an upgrade path
- Only the documented free allowlist works; non-listed tools (including free-mode edit/patch/mutation) stay blocked

## Related Resources
- OpenClaw free quickstart: `/docs/openclaw/quickstart/`
- `sample-decision-trace.json`: example governed trace for the **paid** Dexgate runtime path
- `governed-release-evidence-pack-template.md`: release evidence structure for the paid mode
- `enterprise-evaluation-kit.md`: evaluation path from free hardening to paid pilot
- Enterprise rollout: `/docs/enterprise-rollout/`