$ ls openclaw/reviews/ # the step-back reads
OpenClaw in review
One review per week (and month): what shipped, what broke, what to act on.
Sep 28–Oct 4, 2026 weekly [act] 8 stories
Openclaw 2026.8.35 extended-stable ships critical security fixes
fs-safe 0.21.1 also lands as a breaking change, and the deslop sweep has cut more than 1,000 production lines.
Sep 21–27, 2026 weekly [act] 8 stories
acpx 0.18.0 breaks config and permission behavior
Three acpx fixes land alongside the release, and fs-safe 0.19.0 adds strict secret-file durability.
Sep 14–20, 2026 weekly [act] 8 stories
fs-safe 0.14.0 sets new guest listing rules
The period's security work ran alongside startup-cost and session-write performance fixes across openclaw and clowfish.
Sep 7–13, 2026 weekly [act] 8 stories
Three auth bypass bugs fixed, 2026.9.4 ships rollback recovery
Slack file downloads, OpenAI-compatible transport, and outbound attachments all leaked credentials or data before this week's patches.
Sep 1–30, 2026 monthly [act] 8 stories
OpenClaw 2026.9.7 backs up state before migrations
September also fixed three Slack and attachment authorization gaps, and openclaw 2026.9.3 to 2026.9.4 added update rehearsals and rollbac...
Aug 31–Sep 6, 2026 weekly [act] 8 stories
OpenClaw 2026.8.1 breaks cross-agent session defaults
Cross-agent session access is now the default, while shared ownership fixes land across Crabbox and OCM.
Aug 1–31, 2026 monthly [act] 8 stories
2026.8.1-beta.2 binds secrets to exact HTTPS hosts
Crabbox reaches v0.44.0 with credential-free provider discovery, while the beta release hardens secret egress.