release: 2026.2.3

Author: MarcoDotIO

CHANGELOG.md

@@ -1,21 +1,44 @@
 # Changelog
 
-## 2026.2.3 - Unreleased
+## 2026.2.3 - 2026-03-12
 
 ### Added
 
-- `2026.3.11` SDK + control-plane parity train scaffolding and release rules,
-  keyed to the pinned OpenClaw reference snapshot.
+- Session-control parity for the OpenClaw `2026.3.11` runtime model:
+  persisted thinking, reasoning, verbosity, usage, elevation, group
+  activation, send policy, exec settings, labels, and model overrides.
+- In-process gateway control-plane support for typed agent, session, model,
+  skill, secret, and `browser.request` operations, including browser mutation
+  guards and local secret-vault bridging.
+- Built-in `llm-task` structured-generation support with JSON-first output
+  validation, reasoning sanitization, and malformed tool-call repair paths.
+- Exec allowlist enforcement shared by `ProcessRunner`, JS/WASM skill
+  execution, and gateway/browser-adjacent helpers.
+- Shared media fetch/store/handle primitives for local files, URLs, and memory
+  blobs, plus BlueBubbles as a first-class channel adapter.
+- Checked-in Swift-side control-plane parity fixtures to keep provider, session,
+  gateway, `llm-task`, and channel assertions independent from `.cursor/**` at
+  runtime.
 
 ### Changed
 
-- Documentation now states that `2026.2.3` must land as one green commit per
-  implementation step with warnings-as-errors validation and full coverage for
-  newly introduced codepaths.
+- README, testing docs, and the `2026.3.11` parity manifest now describe the
+  shipped `2026.2.3` parity surface, the validated release rules for the train,
+  and the checked-in fixture sources used by the test suite.
+- Session defaulting now only applies when a session is first created or reset,
+  preserving persisted operator overrides on ordinary inbound traffic.
+- iMessage routing is no longer simulation-first when a native transport is
+  present, and Telegram restart behavior is scoped to polling-network failures
+  instead of retrying duplicate-prone outbound sends.
 
 ### Tests
 
-- Pending parity-train implementation and validation.
+- Added regression suites for session controls, gateway request decoding,
+  `llm-task`, exec allowlists, media handling, BlueBubbles/iMessage/Telegram
+  channel behavior, and checked-in control-plane fixtures.
+- Revalidated `swift build -Xswiftc -warnings-as-errors`,
+  `Scripts/check-networking-concurrency.sh`, `swift test`, iOS example
+  build/test, tvOS example build, and Apple matrix validation for macOS + iOS.
 
 ## 2026.2.2 - 2026-03-11
 

README.md

@@ -13,20 +13,22 @@ OpenClawKit is a Swift-native agent SDK for Apple platforms and Linux services.
 It provides a complete runtime surface: protocol contracts, model routing, channels,
 skills, memory, observability, security, iOS app integrations, and release-grade tooling.
 
-## 2026.2.3 In Flight
-
-- `2026.2.3` is the active SDK + control-plane parity release train for the
-  pinned OpenClaw `2026.3.11` snapshot documented in
-  `docs/parity-2026.3.11.md`.
-- This train is commit-gated: each step must land as one logical commit, build
-  cleanly with `swift build -Xswiftc -warnings-as-errors`, keep all previously
-  passing tests green, and include targeted regression tests for the new
-  codepaths added in that step.
+## 2026.2.3 Highlights
+
+- `2026.2.3` ships the OpenClaw `2026.3.11` SDK + control-plane parity train
+  documented in `docs/parity-2026.3.11.md`.
+- Session state now matches the TS control surface for thinking, reasoning,
+  usage, exec, send-policy, model override, and persisted labels without
+  overwriting live session state on ordinary inbound traffic.
+- The in-process gateway now exposes typed agent, session, model, skill,
+  secret, and `browser.request` handlers with the recent browser mutation
+  guards from upstream.
+- Built-in `llm-task`, exec allowlist enforcement, shared media fetch/store
+  handling, BlueBubbles channel support, non-simulation-first iMessage paths,
+  and safer Telegram restart semantics are now part of the shipped SDK.
 - Checked-in Swift-side parity fixtures under `Tests/OpenClawKitTests` back the
   provider, session, gateway, `llm-task`, and channel assertions so the test
   suite does not read `.cursor/**` at runtime.
-- The final `2026.2.3` release will be cut from the latest validated parity
-  commit, tagged, released, and pushed from that exact revision.
 
 ## 2026.2.2 Highlights