OpenClaw logs can’t prove most policy violations, new study warns

A new study posted to arXiv makes an uncomfortable point about autonomous AI agents. Most of their policy violations cannot be proven from logs alone. The exception is narrow. Violations become provable only when approvals are recorded in structured, machine-readable formats. For OpenClaw, the fast-growing open-source agent framework, that is a problem. Its default logs were not built with that kind of evidence in mind. What the logs actually capture OpenClaw’s default logging works by writing tool calls to local JSONL files, a plain-text format where each line holds one record. What those files leave out is the part compliance teams care about most. They do not record which policy rules were applied or the basis for a decision. They also skip the approval hierarchy behind an action. The criticism is not limited to academic papers. Compliance-focused analyses have raised the same concern, as has GitHub issue #55801, opened March 27, 2026. That issue flagged that the default logs omit policy rule applications and decision foundations. Reports from October 2026 pushed the argument further. They said activity logs for agentic systems must include intent, authority, and lineage data to...