What changed
OpenClaw published a signed 2026.11.3 patch that keeps private subagent completions out of streamed chat replies, fixes certificate verification for worker transfers with blank fingerprints and constrains required-sandbox image previews to allowed folders. It also repairs several update, backup and child-handoff failure paths.
Why it matters
The release targets failure modes where private work can cross a channel boundary, transfer trust can weaken or an interrupted update can leave the gateway stopped. These are concrete security and recoverability boundaries for persistent, multi-agent installations.
What to do
Back up and pin the signed tag, then rehearse the upgrade on a copy of the data. Run a private child task, attempt a blank-fingerprint transfer, request an out-of-scope image preview, interrupt maintenance and restore from backup before promoting the release.
Caveat
This is maintainer evidence for a large patch release, not an independent security audit. Operators upgrading from older releases may still need the documented recovery path because the installed updater cannot acquire every fix before maintenance starts.