Chio·Surfaces·Plugins
OpenClaw · Plugin 03

OpenClaw plugin

Ship signed agents straight from your group chat.

OpenClaw lives in Slack, Discord, and Telegram. Message it like a coworker: describe the agent you want, and a signed operator lands in the channel, bonded and budgeted. Your group chat becomes the control room; every message is a countersignature.

surfaceSlack · Discord · Telegramruntime@chio-protocol/openclaw 0.2.0 · chio 0.1.0 hostedinstallone-click OAuth or self-host Dockersourcebackbay-labs/chio-open-claw-plugin
#ops · Slackagent bonded · 3 watchers
@@chio run a backfill for customer_exports on orders from last week, cap $40, ping me at each chunk
openclaw drafting plan · cap_backfill · 4 chunks · budget $40.00
posted approval card · @ayelet countersigned with passkey
chunk 1 / 412,418 rows
s3.put · backfills/2026-04-11.parquet · 218MB
·receipt thread updated · progress $9.80 / $40.00 · say "chio, stop" to revoke
Receipt0x2f0a…4dcced25519 ✓
01Install

One bot. Three platforms. Same kernel.

OpenClaw is a hosted Chio edge: it adds @chio to your chat platform, handles the OAuth, and routes every action your team describes through the kernel. Receipts stream into the thread; deny reasons are human-readable. Self-host the Docker image if you'd rather run your own edge.

01

Add OpenClaw to your workspace

One-click OAuth for Slack and Discord; a bot token for Telegram. Minimum scopes: channels:history, chat:write, files:write, commands.

$open https://openclaw.chio.world/install
Hosted edge at openclaw.chio.world · self-host below if you'd rather run your own.
02

Or self-host the edge

Pull the Docker image; fill .env with Slack/Discord/Telegram creds and CHIO_TRUST_URL; expose port 8787.

$docker run --env-file .env -p 8787:8787 ghcr.io/backbay-labs/openclaw:0.2.0
03

Bind your trust plane

Point OpenClaw at your Chio trust control plane. Self-host with chio trust serve or use the managed plane.

$@chio, bind trust to https://trust.acme.internal
card posted to #ops · 2 signers required
# Slack / Discord card rendered by @chio
┌─ POLICY PROPOSAL ─────────────────────────────┐
name     support-desk                     
scope    mcp/zendesk · paid tier           
budget   $80.00 / day                      
ttl      4h · refresh on shift end        
gates    refund > $100 ⇒ human approve  
                                             
[ countersign ]   [ attenuate ]   [ deny ] 
└───────────────────────────────────────────────┘
# M-of-N approval, passkey-signed, posted in-thread
02Loop

Your chat. Chio's audit trail.

OpenClaw treats every message that mentions the agent as a signed event. The bot is just the surface; the kernel is everywhere.

01 · Brief

Describe the agent in the channel.

One message from anyone with a passkey. OpenClaw parses intent, picks a preset, drafts a policy card.

@chio do X
02 · Countersign

Two humans tap approve.

The card requires M-of-N signers. Each tap is a passkey signature; all of it lands in the receipt.

2-of-3 · passkey
03 · Run

Agent acts inside the kernel.

Every tool call goes through Chio's 18 guards. Progress updates land in the same thread.

18 guards · fail-closed
04 · Debrief

Receipts bundle in-thread.

A signed evidence bundle attaches to the message. Portable, verifiable offline, auditor-ready.

ed25519 · merkle-anchored
03Features

The incident channel, only useful.

Teams already argue over who did what in chat. OpenClaw makes the answer visible, cryptographic, and countersigned, without turning your channel into a ticketing system.

Natural-language policy

Describe a job; OpenClaw turns it into a draft policy.yaml + agent.md. Diffable, editable, signable.

language → policy

Multi-signer gates

Require M-of-N passkey signatures before a budget, scope, or capability is issued. Every tap recorded.

passkey · multi-sig

Shift handoff

TTLs rotate at shift change. At 5pm, the agent bonds to the next on-call. No credentials shared.

shift · oncall

In-thread receipts

Every decision lands as a compact card with a verify button. Click to see the guard pipeline and proof.

receipts

Cross-platform

Same bot, same kernel in Slack, Discord, Telegram. Receipts are platform-agnostic; verification is offline.

slack · discord · telegram

Revoke from anywhere

Say "chio, stop" and the capability tears down in under a second across every surface.

revoke
04Prompts

Paste into a channel. Get a citizen.

Every prompt triggers an approval card. Team signs; agent runs; receipts land back in the thread.

oncallchio, roll back deploy 2026.04.18-r3 in eu-west-1. Require 2-of-3 signers. Ping if you hit pods in the pii namespace.2-of-3 · k8s-ns · rollback~7 min
growthchio, run last week's customer export into parquet on S3. $40 cap. Message me on each chunk.budget $40 · s3-prefix~12 min
biz-opschio, tag every Intercom ticket with a sentiment label. Read-only. 8-hour TTL.ro · mcp/intercom · ttl 8h~4 min
designchio, regenerate the OG images for the new docs pages. Do it once; notify the docs channel.fs-write · one-shot · channel-scoped~3 min
05Proof

Every tap in the thread is a signature.

allowpolicy.issue · signers: ayelet, nima (2/3)08:42:11
allows3.put · backfills/2026-04-11.parquet · 218MB08:44:03
cancels3.put · exceeds budget · awaits "chio, bump budget $25"08:52:18
allowbudget.raise · +$25 · signers: ayelet, sam (2/3)08:52:34
denys3.delete · guard=tool_access · not in allowlist09:02:09

OpenClaw stamps every reaction, every approval, every scope tweak into the receipt. You can reconstruct the decision lineage from a message ID, down to which guard fired and which human nodded.

agentdid:chio:79256381e958df7380bbb1626d95f55e20929b465011f2a4f486ac2162f87f63channel#ops · T02… · thread 1746.6681count48 receipts · 41 allow · 4 deny · 3 cancelhash0x2f0a…4dcc

Your group chat, now a control plane.

Every team already has an ops channel. OpenClaw turns it into the cheapest, most auditable place to run a bonded agent, without buying another dashboard.