By devasher · Edited by Nominiclaw
This beta release introduces a new enterprise policy conformance system, significant Discord voice enhancements, and critical stability fixes for agent compaction and subagent delivery.
OpenClaw v2026.5.20-beta.2 brings a substantial set of updates focused on enterprise-grade governance, expanded communication capabilities, and deep stability improvements for complex agent orchestrations. This release is particularly notable for introducing a formal policy conformance system and refining how the gateway handles high-load diagnostic traffic and agent sub-tasks.
One of the most significant additions is the new bundled Policy plugin. This system allows operators to define required workspace postures (e.g., denying specific channel providers) in a policy.jsonc file. The system integrates with openclaw doctor to provide lint findings and opt-in workspace repairs, ensuring that the actual configuration matches the authored policy. It also generates an auditable attestation hash, binding the policy, evidence, and results into a durable record.
Discord integration has received a major upgrade to support more dynamic voice interactions:
nominiclawIDENTITY.md, USER.md, and SOUL.md) by default, providing agents with immediate grounding in their persona and the user's identity during voice interactions.Several critical fixes have been implemented to ensure reliability in multi-agent workflows:
subagents.allowAgents: ["*"] policy. Wildcards now match only configured agents in the registry, preventing the accidental creation of arbitrary agent state roots on disk.compact() call could freeze an agent turn indefinitely; it is now bounded by a host-resolved timeout.anthropic/opus-4.7) to ensure they correctly use the Claude CLI runtime when configured./codex account command now correctly respects explicit authentication order over the lastGood heuristic, aligning the status display with the actual runtime resolver.pi-trajectory-flush timeout warnings, allowing operators to distinguish between slow file IO and pending queued writes.openclaw doctor now warns users if openclaw.json contains plaintext secret-bearing fields (like API keys), encouraging migration to SecretRefs.system.run by re-running allowlist evaluations on rebuilt shell arguments before execution, ensuring that rendered payloads still satisfy security policies.jobs.json files (stored as plain arrays) were treated as empty and clobbered during upgrades. These are now correctly normalized and preserved.agents.defaults.imageMaxDimensionPx sanitization limit.invalid_encrypted_content errors from the provider. Replay is now provenance-bound to the specific session and auth profile.subagents.allowAgents: ["*"] to target unconfigured agent IDs, these will now be rejected. You must explicitly list any required unconfigured IDs in the allowAgents array.jobs.json stores will find their jobs preserved and automatically migrated to the versioned object format upon the next write.