OpenClaw 3.31 Deep Dive: Six Breaking Changes, the SQLite Task Ledger, and Exec Obfuscation That Blocks Your Own Agent

Release

OpenClaw v2026.3.31-beta.1 Official Release Notes

The full changelog is dense at roughly 80 entries, but the headline is a real SQLite-backed task ledger unifying ACP, subagent, cron, and background CLI execution under one control plane. Six breaking changes shipped at once including strict gateway auth, fail-closed plugin installs, and the removal of nodes.run.

OpenClaw 3.28 Release Notes: xAI Responses API, Async Plugin Approvals, and ACP Channel Binds

Context for 3.31 since 3.28 laid the groundwork for background task tracking and async approval hooks. The requireApproval hook in beforetoolcall is a meaningful plugin primitive that lets you pause any tool call and route approval through Telegram buttons, Discord interactions, or a slash command.

Analysis

OpenClaw 3.31 in Production: The Exec Obfuscation Trap and How to Patch It

This is the most useful operator writeup on 3.31 because it documents the two-layer exec breakage in detail: the new default approval policy plus a hardcoded obfuscation detector that ignores your ask:off setting and blocks normal agent commands with base64, heredocs, or long strings. The author had to patch three locations in the distributed JavaScript and built a re-runnable patch script just to get their agent functional again.

OpenClaw 3.31 to 4.2: Plugin Bouncer, Task Brain, and the Security Siege

Good high-level framing of what drove the 3.31 through 4.2 security push: Cisco finding a top community skill exfiltrating data, 26% of analyzed skills containing vulnerabilities, and the ClawHub malware campaign planting 800-plus malicious entries. Puts the fail-closed install gate and gateway auth changes in context.

Guide

OpenClaw 3.31 Operator Upgrade Guide: Task Flows, QQ Bot, and Breaking Change Checklist

Practical upgrade guide covering the new openclaw flows CLI, QQ Bot as a first-party bundled channel, and native Codex web search with managed-tool suppression. The upgrade checklist ordering is useful: verify task flow state first, then plugin installs, then node commands and approvals.