Unauthorized command execution via wrapper allowlist persistence

Incorrect authorization in OpenClaw before 2026.3.28 allows local users to persist unintended command-execution approvals through wrappers. The allow-always logic in exec-approvals-allowlist.ts resolves a positional carrier as the trusted executable, even when that carrier dispatches a shell or another wrapper whose trailing arguments expand execution semantics. Exploitation requires low local privileges and operator interaction with a one-time approval; the resulting entry permits later commands beyond the approved target and can compromise host data and service availability.