{
  "title": "Formal Verification (Security Models)",
  "content": "This page tracks OpenClaw’s **formal security models** (TLA+/TLC today; more as needed).\n\n> Note: some older links may refer to the previous project name.\n\n**Goal (north star):** provide a machine-checked argument that OpenClaw enforces its\nintended security policy (authorization, session isolation, tool gating, and\nmisconfiguration safety), under explicit assumptions.\n\n**What this is (today):** an executable, attacker-driven **security regression suite**:\n\n* Each claim has a runnable model-check over a finite state space.\n* Many claims have a paired **negative model** that produces a counterexample trace for a realistic bug class.\n\n**What this is not (yet):** a proof that “OpenClaw is secure in all respects” or that the full TypeScript implementation is correct.\n\n## Where the models live\n\nModels are maintained in a separate repo: [vignesh07/openclaw-formal-models](https://github.com/vignesh07/openclaw-formal-models).\n\n* These are **models**, not the full TypeScript implementation. Drift between model and code is possible.\n* Results are bounded by the state space explored by TLC; “green” does not imply security beyond the modeled assumptions and bounds.\n* Some claims rely on explicit environmental assumptions (e.g., correct deployment, correct configuration inputs).\n\n## Reproducing results\n\nToday, results are reproduced by cloning the models repo locally and running TLC (see below). A future iteration could offer:\n\n* CI-run models with public artifacts (counterexample traces, run logs)\n* a hosted “run this model” workflow for small, bounded checks\n\n```bash theme={null}\ngit clone https://github.com/vignesh07/openclaw-formal-models\ncd openclaw-formal-models",
  "code_samples": [],
  "headings": [
    {
      "level": "h2",
      "text": "Where the models live",
      "id": "where-the-models-live"
    },
    {
      "level": "h2",
      "text": "Important caveats",
      "id": "important-caveats"
    },
    {
      "level": "h2",
      "text": "Reproducing results",
      "id": "reproducing-results"
    }
  ],
  "url": "llms-txt#formal-verification-(security-models)",
  "links": []
}