OpenClaw Nodes in Depth: Approval Binds the Plan, Not the Command You Edited Afterward
The best part of remote node execution is how approval binds: exec prepares a canonical systemRunPlan before approval, and once granted the gateway forwards that stored plan — not any later caller-edited command, cwd, or session fields — and re-validates the working directory before running.