Greptile Summary

This PR reserves the OPENCLAW_* environment namespace for trusted shell/global runtime configuration by adding "OPENCLAW_" to BLOCKED_WORKSPACE_DOTENV_PREFIXES in src/infra/dotenv.ts, and extends the workspace dotenv test suite with representative runtime-control keys that were previously unguarded. The approach correctly makes the workspace .env boundary fail-closed for all future OPENCLAW_* additions without per-key blocklist updates.

Confidence Score: 5/5

Safe to merge — the security fix is correct, well-tested, and intentionally minimal.

The core change (adding "OPENCLAW_" prefix to BLOCKED_WORKSPACE_DOTENV_PREFIXES) is straightforward and correct. The case-insensitivity path (.toUpperCase() before prefix check) already existed and is preserved. The new test cases cover the newly guarded keys and also confirm the trusted global path still passes them through. The redundant sub-prefix entries (OPENCLAW_CLAWHUB_, OPENCLAW_DISABLE_, OPENCLAW_SKIP_, OPENCLAW_UPDATE_) are acknowledged by the author as intentionally left for diff minimality. No P0 or P1 issues found.

No files require special attention.

_{Reviews (2): Last reviewed commit: "fix(dotenv): reserve workspace OPENCLAW ..." | Re-trigger Greptile}

@greptile review

@codex review

Codex Review: Didn't find any major issues. Another round soon, please!