BuildWithHQ
Canonical knowledge unit · goclaw

GoClaw team identity and supervision

GoClaw workers can be represented as supervised team participants with explicit owning users, role membership, assignment rules, and operational state instead of anonymous system-wide bots.

ID: BWHQ-GOCLAW-007Status: specifiedAuthority: highgoclawteamidentitysupervisiondatarole

GoClaw team identity and supervision

Identity

The August CustomerCopy foundation includes Team GoClaw identity/supervision additions. A GoClaw should operate through explicit user/team/role relationships rather than a single omnipotent tenant credential.

Assignment

Inbox assignment and DataRole membership can constrain which GoClaw identity is allowed to claim work. This allows different AI operators to have different business responsibilities and data envelopes.

Supervision

Supervision should make it possible to inspect what a GoClaw is working on, what it proposed, what awaits approval, and what actually executed.

Related knowledge

GoClaw governed AI operator modelGoClaw is BuildWithHQ’s governed AI operator pattern: it works from permitted Inbox/context, prepares actions, uses approval and freshness controls, and executes through canonical action services rather than mutating data directly.Security invariantsSecurity is designed as a shared structural layer: server-derived identity, one authorization path, explicit tenant/application/location scope, and separate permissions for read, AI, export, and sensitive disclosure.
Machine-readable source: canonical Markdown. This HTML companion exists for human reading, search indexing, and AI retrieval.