OpenClaw v2026.5.20 Refactors Execution Authorization and Enhances Discord Speech According to Beating monitoring, the open-source terminal programming agent OpenClaw has released version 2026.5.20, which refactored the underlying execution authorization mechanism and deeply integrated Discord real-time voice and policy control. The new version completely removes the execution permission list based on the cat command combination in the old version. After the security mechanism upgrade, users must use specialized read tools to load Skill files, and the system will only automatically release verified Skill execution files, thus blocking the security vulnerability of non-standard script calls. Discord's real-time voice conversation has added a user dynamic following function. AI can intelligently follow designated users across voice channels, support seamless switching among multiple users, and retain the DAVE recovery mechanism. By default, the system injects portraits and character contexts carried by files such as Identifity.md, USER.md, and SOUL.md into real-time voice conversations to enhance the realism of voice interaction. Users can also turn them off directly through the voice.realtime.boot strapContextFiles parameter. In terms of operation control and management, the new version has a built-in Policy policy plugin in the command line, which supports channel consistency checks and workspace repairs. The new version adds a device code login method to the xAI interface, allowing users to complete authorization through OAuth without the need for local browser callbacks. The simplified local model switch experimental. localModelLean now supports independent activation for individual agents, without the need for global forcing. The OpenRouter interface fully complies with the params. Provider routing policy at the service provider level and allows for coverage using model and agent parameters. In the underlying dependencies, the bundled Codex suite has been upgraded to version 0.132.0, fixing anomalies such as scheduled tasks occupying the main session channel and loss of Codex encryption response. [Original link]