ChainThink News: The open-source terminal programming agent OpenClaw has released version v5.20, restructuring the underlying execution authorization mechanism and deeply integrating Discord real-time voice communication and strategy control.

The new release removes the legacy execution allowlist based on cat command compositions.

After security mechanism upgrades, users must use a dedicated read tool to load Skill files; the system now only auto-approves verified Skill execution files, closing security loopholes from non-standard script invocations.

Discord real-time voice sessions now feature dynamic user-following functionality—AI can intelligently follow designated users across voice channels, supporting seamless multi-user switching while preserving the DAVE recovery mechanism.

The system defaults to injecting IDENTITY.md, USER.md, and SOUL.md into real-time voice sessions to carry persona and contextual metadata, enhancing voice interaction fidelity; users may disable this feature via the voice.realtime.bootstrapContextFiles parameter.

The new version includes an embedded Policy plugin in the CLI, supporting channel consistency checks and workspace repair; a new device code login method has been added for the xAI interface, enabling OAuth authorization without local browser redirects.

The experimental.localModelLean flag has been streamlined to support independent activation per Agent, eliminating the need for global enforcement.

The OpenRouter interface now fully adheres to provider-level params.provider routing policies, allowing model and agent parameters to override routing configurations.

Underlying dependencies have been upgraded—the bundled Codex suite is now at version 0.132.0, fixing anomalies including scheduled tasks monopolizing the main session channel and loss of Codex encrypted responses.