OpenClaw
Runtime auth snapshots preserved, AWS SSH ingress churn fixed
OpenClaw preserves runtime-only external OAuth profiles across saves, and Crabbox stops pruning active AWS SSH leases during refreshes.
read --wire →
$ tail -f topics/ai.log
AI / ML news, every morning.
Daily updates from the AI and machine-learning ecosystem - PyTorch, Hugging Face, the Anthropic and OpenAI SDKs, local LLMs, and the agent frameworks.
256 updates across 10 projects this week.
Your week in AI / ML, every Monday.
One calm review of what shipped across AI / ML - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top AI / ML projects - refine anytime. · Read a sample issue →
Recent wires
OpenClaw
OpenClaw hands compaction back to Codex, crabs get experimental Wayland
OpenClaw stops preempting Codex-owned compaction, Crabbox adds an experimental Wayland desktop, and Codex usage-limit messaging grows actionable recovery paths.
read --wire →
OpenClaw
Linear-time glob matching closes O(n^k) ReDoS in session visibility
OpenClaw replaced regex wildcard matching with a linear-time glob matcher in session-visibility, fixing a polynomial backtracking vulnerability in the agentToAgent allow-pattern check.
read --wire →
OpenClaw
Slack approval QA checkpoints and Telegram poison fix land
OpenClaw ships Slack approval checkpoints for verifiable artifact proof and stops Telegram's isolated-ingress loop on missing harnesses.
read --wire →
OpenClaw
Awaiting agent_end hooks, preserving sessions after compaction failures
OpenClaw now awaits agent_end hooks in local CLI and Codex terminal paths, and auto-reply sessions survive compaction failures.
read --wire →
OpenClaw
Doctor warns on plaintext secrets, remote TUI startup skips plugin load
openclaw's doctor now flags plaintext secrets in config and the remote TUI skips plugin-heavy startup work, trimming cold start.
read --wire →
OpenClaw
ClawHub publish contention hardened, doctor checks go provider-aware
Package publishes now survive Convex write contention, and doctor checks validate Cloudflare and other providers read-only.
read --wire →
OpenClaw
ClawScan security classification now flows through Codex
ClawScan security classification now routes through a queued Codex worker that overrides VirusTotal decisions, making telemetry-only and trusting verified @openclaw/* packages by default.
read --wire →
OpenClaw
Harden skill transfers and sanitize Codex payloads
OpenClaw hardens skill transfer acceptance against banned requesters and sanitizes Codex image payloads against replay attacks.
read --wire →
OpenClaw
Stale bootstrap fix, Feishu streaming, checkpoint ledger
OpenClaw ships a stale-bootstrap fix, Feishu CardKit stream handling, a checkpoint ledger, and a dry-run diff for path edits.
read --wire →
OpenClaw
OpenClaw centralizes provider drift policy and hardens config repair forensics
Provider drift classification is now a shared policy across live tests, plus a config-repair fix closes a gap where the latest broken config copy was silently dropped.
read --wire →
OpenClaw
Throttled agent event fanout, iOS privacy prompts restored
Gateway agent-event streaming gets throttled with cumulative delta buffering, and iOS regains its privacy permission prompts.
read --wire →
OpenClaw
iMessage links survive Apple preview blobs, Windows node ops get richer UI
OpenClaw's iMessage monitor now treats Apple rich-link preview wrappers as metadata rather than user media, so pasted URLs keep flowing through the text path.
read --wire →
OpenClaw
Windows node connection layer refactored, security tests tightened
The Windows node connection layer shipped a major refactor plus a batch of bug and security fixes, while OpenClaw core tightened test assertions across Telegram and provider flows.
read --wire →
OpenClaw
Gateways: v3 signing fixes connection, mDNS UI removed
The Windows node now speaks v3 signaling exclusively, fixing the most disruptive connection failures and removing the now-dead discovery UI.
read --wire →
OpenClaw
oc-path drops YAML and YAGNI grammar as docs sync trails
The substrate's path engine shed YAML support and several speculative grammar features, replacing a hand-rolled MD parser with markdown-it.
read --wire →
OpenClaw
Gateway auth assertions close two bypasses
Two gateway patches remove ways for callers to bypass ownership checks, and a workspace addressing subsystem ships alongside them.
read --wire →
OpenClaw
Security review badges neutralized, Discord voice capture smoothed
ClawHub makes security review badges neutral [ref:7], while OpenClaw improves Discord voice capture [ref:2] and trims reply queue churn [ref:3].
read --wire →
OpenClaw
Telegram picker shows thinking level, Gateway proxy bypass narrowed
OpenClaw's Telegram picker now displays the active thinking level, and Gateway's loopback proxy bypass only targets the intended authority.
read --wire →
OpenClaw
Recover Slack channel restarts after stop timeouts
OpenClaw fixes channel recovery after stop timeouts so auto-reconnect state isn't poisoned.
read --wire →