VITNA for OpenClaw: every tool call OpenClaw routes through the plugin (shell, files, browser, messaging, MCP) is checked by VITNA first; calls to tools you mark as risky wait for a person. Fails closed.
