mirror of
https://github.com/openclaw/openclaw.git
synced 2026-07-23 23:21:11 +00:00
* fix(android): move device identity key into encrypted storage Migrates the plaintext openclaw/identity/device.json Ed25519 signing key into EncryptedSharedPreferences with a verified one-time import (synchronous write, readback check, then plaintext delete) and no fallback reader. Persistence failures now fail closed instead of silently continuing. Documents why the cleartext NSC base-config must stay: NSC domain rules cannot express user-selected RFC1918 gateway endpoints and OkHttp enforces the policy, so GatewayHostSecurity remains the cleartext gate. * fix(android): suppress UseKtx on synchronous identity commit KTX edit(commit = true) discards commit's Boolean; the identity migration fails closed on that result.