chore(sync): mirror docs from openclaw/openclaw@7f1b159c03

.openclaw-sync/source.json

@@ -1,5 +1,5 @@
 {
   "repository": "openclaw/openclaw",
-  "sha": "dea3ab0aa929521c6f2fe962c2fdbde1ae978970",
-  "syncedAt": "2026-04-05T21:46:52.894Z"
+  "sha": "7f1b159c039199806bb0ca8382bcc4bce71a19b8",
+  "syncedAt": "2026-04-05T21:57:40.177Z"
 }

docs/gateway/protocol.md

@@ -540,6 +540,9 @@ implemented in `src/gateway/server-methods/*.ts`.
 - Pairing auto-approval is centered on direct local loopback connects.
 - OpenClaw also has a narrow backend/container-local self-connect path for
   trusted shared-secret helper flows.
+- Local auto-approval for operator devices seeds a bounded per-device token
+  baseline instead of persisting arbitrary requested operator scopes. A shared-
+  secret session may still be broader than the silently issued device token.
 - Same-host tailnet or LAN connects are still treated as remote for pairing and
   require approval.
 - All WS clients must include `device` identity during `connect` (operator + node).