OpenClaw 2026.11.3 hardens private results and update recovery
OpenClaw published a signed 2026.11.3 patch that keeps private subagent completions out of streamed chat replies, fixes certificate verification for worker transfers with blank fingerprints and constrains required-sandbox image previews to allowed folders. It also repairs several update, backup and child-handoff failure paths.
Why it matters: The release targets failure modes where private work can cross a channel boundary, transfer trust can weaken or an interrupted update can leave the gateway stopped. These are concrete security and recoverability boundaries for persistent, multi-agent…