
User-owned state
Keep user files and local changes in place across updates.
This section explains the product model, control points, and operating requirements behind this part of the customer-facing OpenClaw system.
A customer sandbox is not just a template once users start working inside it. Without a clear release path, every update risks overwriting files, creating confusion, or turning rollback into guesswork.

Keep user files and local changes in place across updates.

Move creator changes forward as explicit versions the team can inspect and control.
The rollout layer should package creator changes independently, target the right sandboxes, and apply updates without flattening the work the user owns.

Capture creator changes as a release with history and clear ownership.

Control which sandboxes receive an update and when they receive it.

Keep prior versions ready so the team can reverse a bad rollout quickly.
Clear release boundaries make upgrades easier to reason about, easier to support, and much safer to run at customer scale.

Move forward without clobbering user-owned state.

Version boundaries make incidents easier to trace and explain.
If your team already has OpenClaw logic working, the next conversation should be about sandbox persistence, version rollout, per-user metering, spend cutoffs, scoped secret injection, and what it takes to support real customers without turning the infra layer into a second company.
Book a Call
Open the intake form to share your deployment context, current blockers, and what kind of conversation would be useful.