OpenClaw 2026.6.6-beta.1: fail-closed security boundaries, OpenRouter OAuth, Claude Fable 5
First beta of the 2026.6.6 line, dominated by hardening and reliability work: transcript, sandbox, MCP, browser, channel and exec-approval paths now fail closed on unsafe access, timed-out approvals and malformed boundary input. Provider coverage grows with OpenRouter OAuth and Claude Fable 5, and the default compaction timeout drops to 180 seconds unless explicitly configured. Relevant to anyone running OpenClaw against Telegram, iMessage, browser or MCP surfaces.
- Security boundaries fail closed across transcript, sandbox, MCP, browser, channel and exec-approval paths; unauthorized Telegram DM text no longer enters cache or prompt context
- Telegram: account-scoped topics route to the right agent; streamed text survives tool calls; callback and draft chunks stay coherent
- iMessage: always-on inbound recovery, durable echo markers, block streaming, idle approval discovery, outbound transport survives restarts and idle periods
- Browser/MCP: reuse of existing browser sessions, CDP/WebSocket discovery, default-profile URLs, OAuth/SSE transport, tool schema handling
- Providers: OpenRouter OAuth, Claude Fable 5, local-model execution, normalized tool progress, Gemma 4 reasoning replay, Codex compaction ownership corrected
- Startup: Control UI no longer blocks on broad model loading; cached metadata, lazy slash-command work, first-event tracing, warnings on slow initial replies
- Default compaction timeout lowered to 180s; explicit configuration still respected
- Memory: llama.cpp runtime moved into its provider plugin; embeddings batched across files; agent model catalog cache persisted
- Plugins/ClawHub: reusable package publishing, dry runs skip publish approval, declared installed trusted hooks, managed plugin version-drift reporting
- Content boundaries: Codex/Harmony protocol artifacts suppressed, transcript images redacted, browser and LanceDB memory media directives neutralized
- Channel fixes across WhatsApp, Feishu, Mattermost, LINE, Discord and OpenAI Realtime WebRTC transcripts
Source text is truncated mid-sentence in the final section; some changes may not be captured here.
COMMUNITY
No curated reactions recorded for this event. Facts and takes are kept in separate layers — community context is added by hand, never blended into the record above.