OpenClaw 3.31 to 4.2: Six Breaking Changes, Durable Task Orchestration, and a Security Siege Worth Understanding

Release

OpenClaw v2026.3.31 Drops Six Breaking Changes and a Unified SQLite Task Ledger

This is the architectural release the multi-agent community has been waiting for. ACP, subagent, cron, and background CLI work now flow through one SQLite-backed control plane with real lifecycle tracking and the new openclaw flows CLI surface for inspection and cancellation.

Task Flows Become Operational Infrastructure in 4.2: Durable State, Child Spawning, and Plugin API Access

Task Flows cross from scaffolding to production-ready in 4.2 with managed vs mirrored sync modes, sticky cancel propagation to child tasks, and a new api.runtime.taskFlow seam for plugin authors. If you run any daily cron automation through OpenClaw, this is the release where orchestration becomes inspectable and recoverable.

Analysis

Operator Field Notes: The Exec Obfuscation Detection That Ignores Your ask:off Config

This is required reading before upgrading. The new detectCommandObfuscation() function blocks commands with heredocs, base64, eval, or length over 10K chars regardless of your ask: off setting, and there is no config knob to disable it. Agents building long shell commands or inline scripts will hit this wall immediately.

Security

OpenClaw 3.31 to 4.2: Plugin Install Gate, Node Pairing Lockdown, and the ClawHavoc Context

The official blog ties the rapid three-release sprint to a real threat: Cisco found 26% of skills on ClawHub had vulnerabilities and a campaign planted 800+ malicious entries. The dangerous-code install gate and --dangerously-force-unsafe-install flag are direct responses to that, not just hygiene.

Gateway Auth Drops Implicit Same-Host Trust: What Self-Hosters Need to Change

The trusted-proxy mode now rejects mixed shared-token configs and local-direct fallback requires an explicitly configured token instead of assuming same-machine callers are safe. If you set up OpenClaw on a single box and never touched auth config, your agent may stop authenticating after upgrading.

Tools

Production Config Migration: xAI and Firecrawl Paths Have Moved to Plugin-Owned Namespaces

Both xAI search and Firecrawl web_fetch configs moved from core paths to plugins.entries.* namespaces as part of a broader push to give plugins ownership of their own config schemas. Run openclaw doctor --fix and it handles the migration automatically, but any CI or scripts referencing old paths need manual updates.

Cross-Agent Memory Search and MCP HTTP Transport: Two Quiet Upgrades for Multi-Agent Stacks

The new memorySearch.qmd.extraCollections config lets agents selectively search other agents' session transcripts without merging namespaces, a real building block for specialized agent teams. MCP servers can also now live at remote HTTP or SSE URLs with auth headers, removing the requirement to proxy everything through a local stdio process.