← All updates
2026-05-13 Risk note Risk

OpenClaw’s beta train shows the hard part of channel agents: session keys, silent sends, and context boundaries

OpenClaw v2026.5.12-beta.3 is an official beta with useful fixes, including clearer subagent session nesting, fewer redundant subagent heartbeat wake-ups, better provider stream draining, admin/write gates for memory-wiki paths, and OpenAI auth-profile media-tool availability. The more urgent reader takeaway comes from the fresh field reports around it: issue #81234 says beta.3 cron jobs can time out after turn-accepted and stale cron sessionKey values can block a Discord DM lane; issue #81240 reports Slack sessions where the model writes a complete reply but nothing is posted to Slack; issue #81241 reports Telegram runtime-context envelopes appended into the user text body as well as delivered out-of-band; and PR #81242 fixes isolated subagent spawns that were still preparing inherited context, causing runaway CPU and stalled local inference on Ollama-like runtimes.

ImpactRisk Sources4 Audienceoperator · team · developer
Why it matters

This is the practical boundary layer for always-on agents. A channel agent can have strong tools and policies, but users experience reliability through whether a DM lane answers, a Slack reply is actually posted, trusted metadata stays out of prompt text, and lightweight subagents remain lightweight. These reports are therefore more valuable than another feature checkbox: they show where long-running, multi-channel agents still need operational guardrails.

Evidence
  • The v2026.5.12-beta.3 release notes list fixes for subagent session nesting, redundant subagent completion wake-ups, OpenAI-compatible stream draining, memory-wiki scope gates, and auth-profile-backed image_generate availability
  • Issue #81234 describes OpenClaw 2026.5.12-beta.3 cron jobs timing out at turn-accepted and stale cron sessionKey values pointing at a Discord direct-message lane until manual clearing and gateway restart restored replies
  • Issue #81240 documents Slack sessions with complete assistant replies and correct deliveryContext, but no chat.postMessage result and no visible Slack reply
  • Issue #81241 shows Telegram runtime-context metadata duplicated inside the user message body, creating transcript clutter and a soft prompt-injection footgun
  • PR #81242 says isolated lightweight subagent spawns were invoking context-engine preparation and inflating payloads into local inference runtimes; PR #81243 adds Discord single-message fetch by ID or URL
Risk notes
  • Several items are open issues or PRs, not a stable release guarantee
  • The strongest regression report is from a beta host, so production operators should reproduce in their own staging topology
  • Manual cleanup such as clearing stale cron sessionKey values should be done carefully and backed up because it touches scheduler state