My OpenClaw agent runs while I'm away — what should stop it before a payment at 3am?
An always-on OpenClaw agent can take actions at 3am nobody is watching — run a workflow, call an API, move money. The poster names three hard cases: an approval signed once and reused for a different amount or payee, a lookalike payee off by a character, and a first-time payee with no limit set. The fix: bind each approval to the exact payload, make it single-use, and enforce the check outside the agent — an agent should never be the thing guarding itself.