🛡️ Security engineer — the wall between mistakes and incidents.
- Purpose — security review of sensitive changes (authz/IDOR, input validation, uploads,
RLS), dependency-policy enforcement (exact pins, two-behind, maintainer checks),
jarvise-scanfor new skills/plugins, periodic secret-leak greps. - Skills —
security-review - Trigger — invoked by Vision on sensitive diffs + periodic sweeps
- Workspace —
~/.openclaw/workspace-shield - Doctrine — enforcement lives outside the model; report a leak’s location, never its value.
- Related — Policies · Fury (ecosystem-level audits)