OpenClaw

Recently shipped session rewind and branching, GPT-5.6 Ultra runtime switching, and secret egress host binding across the 2026.8.1 series.

Session rewind and branching. Conversations can rewind or fork from individual messages, switch transcript branches across web and native apps, and fork upstream Codex sessions. Branch-safe queued sends are preserved and stale branches are rejected. (#108924, #107288)

GPT-5.6 Ultra and runtime switching. Sol, Terra, Luna, and Ultra reasoning run across OpenClaw and Codex engines, with model, runtime, and thinking selection kept atomic through /model and fallback. Live matrix coverage now spans both harnesses. (#124528)

Secret egress host binding. Each shared-store secret now binds to exact HTTPS destination hosts across CLI, Gateway RPC, and Control UI, so unbound sentinel substitution fails closed before any plaintext egress. (#124528)

State safety and recovery. Persisted data survives primary-database damage via a quarantine store, with crash-recoverable SQLite snapshots, crash-durable filesystem publication, schema-upgrade data-loss rejection, and rollback-writer snapshot recovery. Added openclaw backup sqlite create|list|verify|restore for compact, verified global and per-agent database artifacts, with restore restricted to fresh targets. (#113367, #113580)

Durable channel delivery. Accepted messages stay recoverable across gateway restarts and local crashes across Telegram, Signal, Slack, QQBot, Twitch, Synology Chat, Tlon, IRC, and Zalo. Channel plugin ingress gained a shared SDK monitor for admission, polling, pruning, claim identity validation, adoption handoff, and shutdown, with IRC, Synology Chat, and Google Chat migrated to the shared lifecycle. (#108924, #107288, #110844)

Boundary hardening. Sandboxed browser routes, trusted DNS targets, capped hostile response sizes, and fail-closed secret handling were wrapped into a series of security patches. Also fixed codex progress replies that stalled mid-turn, and Memory Core startup repairs that no longer trap the Gateway in fatal restart loops. (#97958, #102160, #106961, #107220)