OpenClaw 2026.3.31: Task Flows, Locked-Down Installs, and the Security Release Your Agent Needed

OpenClaw 2026.3.31 dropped yesterday, and this one's different. Where the last few releases added capabilities — new channels, new models, new tools — this release is about control. Specifically: controlling what your agent installs, what your nodes can access, and how background work is tracked. If you run agents in production, this is the update you've been waiting for. Task Flows: Your Agent's Work Finally Has a Paper Trail This is the headline feature and it's been a long time coming. Background tasks — sub-agents, cron jobs, ACP sessions, CLI background runs — were all tracked separately. Different systems, different lifecycle management, different ways things could silently break. Not anymore. Everything now lives under one SQLite-backed ledger. You can run openclaw flows list, openclaw flows show, and openclaw flows cancel to see and manage all background work in one place. Lost runs get auto-recovered. Orphaned tasks surface doctor hints. When a sub-agent finishes, its result r