Security

The daemon holds Google and CMS credentials. An exposed dashboard is a defacement event.

• Bind 127.0.0.1:7777 only. Off-loopback without auth refuses to start.
• Token ≥ 32 characters, ≥ 8 distinct. Short tokens are how OpenClaw instances were brute-forced in 2026.
• Host allowlist, Origin check, Sec-Fetch-Site, CSRF header. No CORS anywhere.
• Docker publishes loopback and exits if SEAN_AUTH_TOKEN is missing.
• sean freeze writes HALT and survives restart.
• The LLM never holds credentials and never calls a write API.
• Hosted never stores CMS write credentials — pair a customer-side connector.

Report vulnerabilities via SECURITY.md.