OpenClaw Safe Update

Run production-safe OpenClaw upgrades with isolation-first defaults.

Workflow

1. Use bundled script: scripts/openclaw-safe-update.sh.
2. Run verify-only first (default):
   • bash scripts/openclaw-safe-update.sh
   • Optional target pin: --target <version>
   • Port is auto-selected from free ports starting at 18000.
3. If verify fails, inspect log path printed by script and report the root cause.
4. If verify passes, ask whether to apply.
5. Apply only on explicit confirmation:
   • bash scripts/openclaw-safe-update.sh --apply

Platform references

Detect OS first, then read exactly one platform guide: