OpenClaw: Worker Isolation, Secure Plugin Manifests, and CI Profile Speed

Tools

Worker Process Isolation for Plugins

This PR adds a WorkerManager that runs plugins in separate processes with configurable memory/CPU limits. It's a major step toward preventing runaway plugins from crashing the core system. For builders, this means safer plugin experimentation in production-like environments.

CI Profiling to Identify Slow Build Steps

This issue introduces a CI pipeline profiler that logs time spent per stage, helping pinpoint bottlenecks. Early data shows plugin compilation is a major drag, which could shift optimization focus. For teams, this means faster feedback loops and more reliable deployments.

Analysis

Proposal: Secure Plugin Manifests with Signed Metadata

A new issue proposes signed manifests for plugins to verify authorship and prevent tampering. This directly addresses supply chain trust concerns that have been recurring in recent discussions. If implemented, it could enable a curated plugin marketplace.

Unified Configuration Schema Proposal

A proposal to define a single YAML schema for all configuration files, replacing scattered formats. This could reduce onboarding friction and make automated tooling more reliable. It's a pragmatic move toward reducing

News

Fix: Hot-Reload Race Condition in Plugin Updates

A bugfix PR that patches a race condition during plugin hot-reload, preventing state corruption under high load. It's a tactical win for anyone running dynamic plugin systems in production, reducing one more source of intermittent failures.