EN-A003-066-openclaw-security-baseline-drift-check

English

---

[EN-A003-066] Monthly Security Baseline Drift Check

• Date: 2026-02-15
• Language: EN
• Category: Operations / Security
• Status: New

Overview

Run one monthly drift check against the minimum security baseline instead of creating many overlapping security playbooks.

OpenClaw Implementation Steps

1. Agent loads baseline controls from EN-060 and onboarding scope from EN-063.
2. Sub-agent audits current settings and runbooks against the 3 baseline axes.
3. Agent returns a drift report with required fix now and optional improvement later.
4. User approves fixes; agent records completion in Vault.

Required / Optional

• Required: verify all 3 baseline axes (auth foundation, secrets, monitoring/recovery).
• Optional: add canary validation and auto-remediation for low-risk gaps.

Cross References

• Baseline hub: EN-060-openclaw-security-minimum-baseline.md
• Day-1 onboarding: EN-063-openclaw-security-baseline-onboarding.md

Tags

#OpenClaw #SecurityBaseline #Operations #DriftCheck