Lock down who can DM the assistant
configuration & security
// what it does
Every DM-capable channel has a dmPolicy: pairing (default, code-gated), allowlist (only listed senders), open (public, requires "*"), or disabled. For multi-person or open DMs, set session.dmScope to per-channel-peer so different senders do not share one context.
// shell
$ openclaw config set channels.whatsapp.dmPolicy allowlist$ openclaw config set session.dmScope per-channel-peer// gotcha
open is the dangerous one — it hands your agent to anyone and only takes effect with an explicit "*" in the allowlist, a deliberate speed bump. Pair open DMs with a restricted tool profile so a stranger cannot run exec.