Workspace
Tools
OpenClaw tool policy: global defaults first, then per-agent overrides and effective access.