openclaw-control-plane/docs/ROLE_MISDIRECTION_RECOVERY.md

Role Misdirection Recovery

Use this procedure when a prompt intended for one role is sent to another Cursor window or agent role.

Immediate Stop

• Stop the receiving role from acting outside its assigned scope.
• Do not reinterpret the prompt for the current role.
• Do not run execution, approval, service, network, Nginx, Docker, firewall, or token-handling commands.
• Do not continue mutation-stage work from any role until ORCHESTRATOR reviews the incident.

Audit

• Identify the intended role, actual receiving role, workspace path, and time window.
• Review modified files and recent evidence.
• Check whether any secrets were written to files, logs, commits, or chat.
• Check whether any PC/VPS commands, approvals, service changes, Nginx/Docker changes, website changes, or firewall/network changes were executed.
• Check sync-state/heartbeat-*.json and sync-state/error-*.md for sync health.

Correction

• CORRECTION records findings in handoff/CORRECTION.md and blocks dependent tasks if needed.
• ORCHESTRATOR reviews cross-role edits and either adopts or corrects them.
• USER_STATUS.md must show a paused state and a single safe next action.
• Executor handoffs must explicitly say whether their tasks are blocked or allowed.
• Task files must not be left in ready when role ownership or authorization is uncertain.

Resume Criteria

Work may resume only when:

• ORCHESTRATOR records the corrected active state.
• Any affected task status is reconciled.
• No secret leak or unsafe mutation remains unresolved.
• Sync health is not blocked.
• Any execution or authorization work receives fresh explicit user authorization targeted to the correct role and workspace.

Prevention Checklist

• Each Cursor window starts with a visible role marker.
• Before sending an execution prompt, the user and agent verify role, workspace, and handoff.
• Authorization prompts echo the target role and exact allowed action.
• Verifier roles refuse executor/orchestrator work.
• Execution agents refuse work outside their assigned task file.