-
-
Notifications
You must be signed in to change notification settings - Fork 80.7k
Feature: Include trusted sender_name in inbound metadata envelope #45427
Copy link
Copy link
Open
Labels
P1High-priority user-facing bug, regression, or broken workflow.High-priority user-facing bug, regression, or broken workflow.clawsweeper:needs-maintainer-reviewClawSweeper marked this issue as needing maintainer review before automation.ClawSweeper marked this issue as needing maintainer review before automation.clawsweeper:needs-product-decisionClawSweeper marked this issue as needing a product or behavior decision.ClawSweeper marked this issue as needing a product or behavior decision.clawsweeper:needs-security-reviewClawSweeper marked this issue as needing security-sensitive review.ClawSweeper marked this issue as needing security-sensitive review.clawsweeper:no-new-fix-prClawSweeper does not recommend queueing a new automated fix PR for this issue.ClawSweeper does not recommend queueing a new automated fix PR for this issue.clawsweeper:source-reproClawSweeper found a high-confidence source-level issue reproduction.ClawSweeper found a high-confidence source-level issue reproduction.impact:message-lossChannel message delivery can be lost, duplicated, or misrouted.Channel message delivery can be lost, duplicated, or misrouted.impact:securitySecurity boundary, credential, authz, sandbox, or sensitive-data risk.Security boundary, credential, authz, sandbox, or sensitive-data risk.impact:session-stateSession, memory, transcript, context, or agent state can drift or corrupt.Session, memory, transcript, context, or agent state can drift or corrupt.issue-rating: 🦞 diamond lobsterVery strong issue quality with high-confidence source-level or clear reproduction.Very strong issue quality with high-confidence source-level or clear reproduction.maturity:stableIssue affects a taxonomy feature currently scored M4/M5.Issue affects a taxonomy feature currently scored M4/M5.
Description
Metadata
Metadata
Assignees
Labels
P1High-priority user-facing bug, regression, or broken workflow.High-priority user-facing bug, regression, or broken workflow.clawsweeper:needs-maintainer-reviewClawSweeper marked this issue as needing maintainer review before automation.ClawSweeper marked this issue as needing maintainer review before automation.clawsweeper:needs-product-decisionClawSweeper marked this issue as needing a product or behavior decision.ClawSweeper marked this issue as needing a product or behavior decision.clawsweeper:needs-security-reviewClawSweeper marked this issue as needing security-sensitive review.ClawSweeper marked this issue as needing security-sensitive review.clawsweeper:no-new-fix-prClawSweeper does not recommend queueing a new automated fix PR for this issue.ClawSweeper does not recommend queueing a new automated fix PR for this issue.clawsweeper:source-reproClawSweeper found a high-confidence source-level issue reproduction.ClawSweeper found a high-confidence source-level issue reproduction.impact:message-lossChannel message delivery can be lost, duplicated, or misrouted.Channel message delivery can be lost, duplicated, or misrouted.impact:securitySecurity boundary, credential, authz, sandbox, or sensitive-data risk.Security boundary, credential, authz, sandbox, or sensitive-data risk.impact:session-stateSession, memory, transcript, context, or agent state can drift or corrupt.Session, memory, transcript, context, or agent state can drift or corrupt.issue-rating: 🦞 diamond lobsterVery strong issue quality with high-confidence source-level or clear reproduction.Very strong issue quality with high-confidence source-level or clear reproduction.maturity:stableIssue affects a taxonomy feature currently scored M4/M5.Issue affects a taxonomy feature currently scored M4/M5.
Type
Fields
Priority
None yet
Summary
The current inbound metadata envelope provides
sender_id(a trusted, platform-injected identifier) but not a resolvedsender_name. Agents are forced to do their own name resolution — either via a local registry lookup or, incorrectly, by reading conversational context (untrusted).This leads to a real failure mode: agents read names from prior messages or channel context and misroute DMs to the wrong person. We saw this today when Mendel sent messages intended for Steve to a different user because a name mentioned in conversation context bled into the wrong session.
Proposed Solution
Add a trusted
sender_namefield to the inbound metadata envelope, resolved by OpenClaw from the server's user directory at message ingestion time — the same waysender_idis already injected.Current envelope (example):
{ "sender_id": "927709652014215199", "sender": "scekker" }Proposed envelope:
{ "sender_id": "927709652014215199", "sender": "scekker", "sender_display_name": "Stephen Ekker" // resolved from server directory, trusted }Why This Matters
Current Workaround
Agents maintain local
people/registry.jsonfiles and are instructed via SOP to always look upsender_idbefore composing any message. This works but is an agent-level patch for a platform-level gap.Context
Reported by the Ekker Lab / UViiVe AI fleet. Fleet runs multiple agents (Atlas, Zevo, Uvy, S.A.R.A.H., Buster, Pip, Mendel) across Discord channels and DMs. Identity misrouting in this context has real consequences — wrong person receives sensitive research coordination or private messages.
/cc @scekker