ChainThink news: The open-source terminal programming agent OpenClaw has released the v5.20 version, rearchitecting its underlying execution authorization mechanism and deeply integrating Discord real-time voice and strategy control.

The new version removes the legacy execution allowlist based on cat command compositions.

After security enhancements, users must now use a dedicated read tool to load Skill files; the system will only automatically permit execution of verified Skill files, closing security vulnerabilities from non-standard script invocations.

Discord real-time voice sessions now feature dynamic user following, enabling AI to intelligently follow designated users across voice channels, supporting seamless multi-user switching while preserving the DAVE recovery mechanism.

The system defaults to injecting IDENTITY.md, USER.md, and SOUL.md into real-time voice sessions to carry profile and role context, enhancing voice interaction fidelity; users may disable this feature via the voice.realtime.bootstrapContextFiles parameter.

The new version includes an in-built Policy plugin for command-line operations, supporting channel consistency checks and workspace repair; a new device code login method has been added for xAI interfaces, enabling OAuth authorization without requiring local browser callbacks.

The experimental.localModelLean toggle has been refined to support independent activation per Agent, eliminating the need for global enforcement.

OpenRouter interface now fully adheres to provider-level params.provider routing policies, allowing model and agent parameters to override configurations.

Underlying dependencies have been upgraded—the bundled Codex suite is now at version 0.132.0, fixing issues including scheduled tasks hijacking main session channels and loss of encrypted Codex responses.