What changed
OpenClaw 2026.9.4 can restore a retained package, configuration and service after compatible failed updates; consolidates plugin management; adds prepared cloud workers and snapshots; recovers interrupted final replies; and supports deployment-owned read-only configuration.
Why it matters
The release targets operational failure and configuration drift in long-running agent systems, while prepared workers and unified plugin controls add persistent cost and authority that operators must make explicit.
What to do
Pin the signed release in an isolated gateway, back up the database, simulate one schema-neutral and one migration-bearing failure, verify rollback records and configuration ownership, then cap or disable prepared workers before testing a cloud session.
Caveat
Automatic rollback is blocked by schema changes, incompatible databases or intervening operator edits; prepared workers incur running-machine charges. Reliability and security claims are project-reported and span a large release surface.