⚡ Workflows

Audit Mode (one executes, another audits, another signs)

Ensure independence between execution, control, and final approval.

Bundle files

📄ORCHESTRATION.md— Orchestration

1# ORCHESTRATION.md

3## Diagram

5 ┌───────────┐ ┌──────────┐ ┌──────────┐

6 │ Executor │─────>│ Auditor │─────>│ Signer │

7 └─────┬─────┘ └────┬─────┘ └────┬─────┘

8 │ │ │

9 v v v

10 ┌───────────┐ ┌──────────┐ ┌──────────┐

11 │ Changes │ │ Evidence │ │ Approved │

12 └───────────┘ └──────────┘ └──────────┘

14## Workflow

15Audit Mode (one executes, another audits, another signs)

17## Objective

18Ensure independence between execution, control, and final approval.

20## Roles

21- **Executor:** makes changes.

22- **Auditor:** validates technical/process compliance.

23- **Signer:** approves final release.

25## Rules

26- Auditor cannot be the executor.

27- Signer reviews auditor's evidence, not just summary.

28- No signature without complete evidence.

30## Minimum evidence

31- What changed

32- Why it changed

33- What tests were run

34- Audit result

36## Closure

37- Explicit signature

38- Exception log (if any)

Lines: 39 | Words: 124

Copy bundle to your OpenClaw workspace.

curl -fsSL https://raw.githubusercontent.com/cerealskill/openclaw-agents/main/install.sh | bash -s workflow audit-mode EN