Open-source terminal AI agent OpenClaw just dropped v2026.5.20, and it's a big one. The update overhauls the underlying execution authorization system and deepens Discord real-time voice integration in ways that make the assistant feel more alive — and a lot harder to abuse.
The old execution allowlist, which was cobbled together with cat command combos, is gone. Instead, users now have to use a dedicated read tool to load Skill files, and the system will only auto-approve validated Skill executables. That closes a pretty glaring security hole around non-standard script calls.
On the Discord side, there's a new dynamic user-follow feature for voice sessions. The AI can now intelligently follow a designated user as they hop between voice channels, with seamless multi-user switching and a DAVE recovery mechanism built in. By default, the system injects profile and role context from files like IDENTITY.md, USER.md, and SOUL.md into real-time voice sessions — making interactions feel more authentic. If you're not into that, you can kill it with the voice.realtime.bootstrapContextFiles flag.
On the control and management front, the CLI now ships with a Policy plugin baked in, supporting channel consistency checks and workspace repair. There's also a new device code login method for the xAI interface — no local browser callback needed; you can complete OAuth right from the terminal.
The experimental.localModelLean toggle now works per-agent instead of globally, which is a nice touch for those running mixed local and remote models. The OpenRouter interface fully respects the service-level params.provider routing policy, with options to override per-model and per-agent.
Under the hood, the bundled Codex suite has been bumped to version 0.132.0, fixing bugs where scheduled tasks would hog the main session channel and encrypted Codex responses would go missing.