# Game Server Permissions Matrix

| Request | Player | Operator | Owner | Required evidence |
|---|---:|---:|---:|---|
| View status and player count | Yes | Yes | Yes | Authenticated requester; sanitized status result |
| Start an offline server | Yes | Yes | Yes | Exact profile; server confirmed offline |
| Routine save and restart | Established players only | Yes | Yes | Player query; warning; save acknowledgement; backup; readiness checks |
| Apply approved game update | No | Yes | Yes | Backup manifest; staged or reversible update; readiness and content audit |
| Install a reviewed mod | Approved game scope only | Yes | Yes | Compatibility manifest; staging result; rollback set |
| Change gameplay configuration | No | Yes | Yes | Exact key/value diff; backup; validation |
| Restore a world or save | No | Scoped authorization | Yes | Server offline; source manifest; preserved current state; client acceptance |
| Reset or permanently delete a world | No | No | Yes | Explicit target; explicit destructive approval; recoverable backup |
| Change credentials or network exposure | No | No | Yes | Separate security review and explicit owner approval |
| Reboot host or change OpenClaw policy | No | No | Yes | Explicit owner approval and recovery path |

Roles are examples. Enforce them with stable platform identities and server-side policy, not display names or instructions embedded in prompts.