OpenClaw harness

OpenClaw provides the coding-agent experience. This directory packages its lifecycle scripts, pinned image reference, and OpenShell profiles so the harness does not need a broad host login to be useful.

Deploy and test OpenClaw from the OpenShell single-server guide. For model access and tools, use the Praxis walkthrough. run.sh executes a bounded agent exec task with only read and write tools; connect.sh opens a shell for independent checks or manual command execution. Agent files live in /home/node/.openclaw/workspace; /app remains read-only. Automatic exec is disabled because process-group cleanup is not qualified. Browser/gateway authentication, retained sessions, and --backend are not qualified.

The preinstalled harness image is digest-pinned in openshell/configs/images.env.