Read-Only Soul Documents: The Most Important OpenClaw Security Decision You'll Make
Your OpenClaw agent's soul documents define everything it does and won't do. If an attacker can modify them — through prompt injection or any other means — you've lost control of your agent. Here's why we make soul documents read-only on every deployment and how we do it.