OpenClaw 3.31 Raw Notes: Breaking Changes, Exec Patching, and the Task Ledger in Production

Release

OpenClaw 2026.3.31 Beta: Full Changelog With Six Breaking Changes

The official release notes are the ground truth here. Sixty-plus changes across tasks, security, channels, and MCP with six breaking changes that have real migration consequences for anyone running automation.

3.28 Release Notes Context: xAI Responses API and Async Plugin Approval Hooks

Reading 3.31 in isolation misses context. The 3.28 notes show the plugin approval infrastructure and background task scaffolding that 3.31 builds on, which helps explain why so many things changed at once.

Analysis

Operator Field Report: The Obfuscation Detection Bug That Overrides ask:off

This is the most valuable read in the batch. A self-hosted operator documents exactly how the new hardcoded obfuscation detection ignores your exec config and blocks legitimate agent commands, plus the specific patch locations you need to fix it.

News

OpenClaw Blog: Plugin Install Scanning, Task Brain, and Gateway Auth Tightening

The official blog post contextualizes 3.31 through 4.2 as a direct response to Cisco finding malware in community skills and the ClawHavoc campaign planting 800 plus malicious entries on ClawHub. Good framing for why the bouncer landed now.

Tools

SQLite Task Ledger for Multi-Agent Workflows: What openclaw flows Actually Gives You

The unified task control plane is the headline feature for anyone running Opus orchestrating sub-agents. The new openclaw flows list and show commands turn task debugging from guesswork into something you can actually trace.

MCP Gets Remote HTTP Transport and Provider-Safe Tool Namespacing

You can now point mcp.servers at a remote HTTP or SSE URL with auth headers instead of requiring a local stdio process. The serverName__toolName naming pattern also kills tool collision bugs between servers that expose identically named tools.

Security

Gateway Auth Breaking Change: Implicit Same-Host Trust Is Gone

trusted-proxy now rejects mixed token configs and local-direct fallback requires an explicit token. If you set up OpenClaw on one machine and never touched auth config because it was local, your agent will stop authenticating after this update.