Daily Edition

illmethinks ClawCharts river for 2026-07-30

Nine validated source-clustered briefs; OpenFang was skipped rather than padded with historically used supporting spines.

OpenClaw’s compaction safeguard can promote credential-shaped text into summaries

An OpenClaw report says string-encoded tool arguments can feed credential values into compaction’s exact-identifier block. Separate open work flags catastrophic regex backtracking in exec approvals and private-memory exposure in shared channels, turning a maintenance sweep into…

Hermes replaces 1.3-second SQLite patience with time-based write budgets

A closed Hermes Agent patch says nine concurrent processes sharing a 10.8 GB state database could lose turns when legitimate write locks lasted beyond roughly 1.3 seconds. The change gives…

Paperclip finds 822 million weekly tokens hiding behind a reported $0

A Paperclip patch says subscription-authenticated Claude runs emitted a numeric zero that the ledger accepted as authoritative cost. On the inspected instance, roughly 822 million tokens a…

NanoClaw offers a digest-pinned hardened agent image without replacing local builds

NanoClaw added an optional prebuilt agent image pinned by digest for amd64 and arm64, with provenance labels and lockfile compatibility checks. Local builds remain the default; update-audit…

PicoClaw can clear the wrong session when dispatch routes a chat to another agent

A PicoClaw operator reports that /clear and automatic compression target the default agent’s store even when dispatch rules route Telegram or Discord to a non-default agent. The real…

IronClaw assembles an eight-part Ledger clear-signing path

IronClaw’s final signing stack adds signed intent, out-of-band review, device ceremony, driver-side verification and a supervised sidecar. Adjacent groups add tenant isolation, trust…