Summary

When agents.defaults.sandbox.workspaceAccess is set to "none", OpenClaw gives each sandboxed session its own isolated workspace under ~/.openclaw/sandboxes/..., which matches the expected isolation model. However, that isolated /workspace ends up mounted read-only, so tools that need to write inside the sandbox workspace stop working.

This makes "none" behave closer to "ro" in practice, even though the agent workspace is still intentionally hidden.

Expected behavior

workspaceAccess: "none" should mean:

• the main agent workspace is not mounted into the sandbox
• each sandboxed session gets an isolated workspace under ~/.openclaw/sandboxes/...
• that isolated sandbox workspace is writable

Actual behavior

Inside the sandbox, /workspace is mounted from the per-session sandbox workspace, but it is read-only:

/workspace <- /home/whyuds/.openclaw/sandboxes/agent-main-feishu-direct-ou_83bb-2d8ddca6 (rw=false)

As a result, many tools that rely on writing into the sandbox workspace cannot be used when workspaceAccess is "none".

Why this seems like a regression

This appears related to commit 903e4dff3 (fix(sandbox): make /workspace bind mount read-only when workspaceAccess is not rw).

That change made /workspace read-only for both "ro" and "none":

• rw: /workspace writable
• ro: /workspace read-only
• none: /workspace read-only

But for "none", /workspace points at the isolated sandbox workspace rather than the main agent workspace, so making it read-only breaks the expected isolated-but-writable workflow.

Reproduction

1. Configure sandboxing so the session is sandboxed and workspaceAccess is "none"
2. Start a sandboxed session
3. Inspect the sandbox mounts or try any tool that writes to /workspace
4. Observe that /workspace is backed by ~/.openclaw/sandboxes/... but is read-only

Suggested direction

Keep workspaceAccess: "none" isolated from the main agent workspace, but make the isolated sandbox /workspace writable. Only workspaceAccess: "ro" should force /workspace read-only.

Related fix PR: #37276