Environment:

• OpenClaw: 2026.3.11
• Platform: macOS (Darwin)

Summary: With OpenClaw 2026.3.11, node-backed exec in webchat/control-ui still emits approval-required and prompts for approval even when tools.exec.security is full and tools.exec.ask is off.

Steps to reproduce:

1. Configure exec defaults to security=full and ask=off
2. Use webchat/control-ui path that triggers node-backed exec
3. Run a simple command
4. Observe: system event reports approval-required

Expected: Command should execute directly without approval in full/off mode.

Actual: approval-required still appears for node-backed exec

Workaround: Use host=gateway instead of host=node