What we've shipped.

Status page & contact flow

Public system status with live component probes, a new contact form that routes to the right inbox, and a proper changelog home.

• Launched/status — live system health with 30s auto-refresh and a JSON API at /api/status.
• Launched/contact — form that routes by topic to support, security, or sales inboxes.
• Launched/changelog — this page. New entries land here within a day of every deploy.

Forced-update safety net for critical CVEs

• SecurityCritical OpenClaw security releases now auto-apply within 72 hours, regardless of the per-VM auto-update setting. Customers get a 24-hour heads-up email.
• ImprovedForce-update respects a killswitch (platform_flags.force_update_enabled) so we can disable the behavior without a redeploy.
• FixedStalled canary runs now auto-fail after 48 hours instead of blocking the release queue.

Auto-apply updates with grace periods

Minor OpenClaw releases now auto-apply after a 7-day grace window if you have auto-update enabled. Major releases never auto-apply — they sit as a banner until you approve them.

• LaunchedPer-VM auto-update toggle in Settings (applies to minor releases only).
• LaunchedDashboard banner for major-version releases with a 30-day nag window.
• ImprovedUpgrade notification emails now include the release type and release-notes link.

Data export on demand

• LaunchedSettings → Data → Export — triggers an encrypted backup and emails a 48-hour presigned link.
• LaunchedRetention policy: 7 daily + 4 weekly + 3 monthly backups, auto-deleted 90 days after cancellation.
• ImprovedBackup encryption moved to per-customer AES-256-GCM with keys derived from a platform secret (HMAC-SHA256).

Admin dashboard & event audit trail

• LaunchedInternal /admin routes for operators (customer search, VM detail, event log).
• LaunchedAppend-only events table — every state transition and webhook is now recorded.
• ImprovedHeartbeat timeouts now surface in the admin panel and fire Discord alerts after 30 minutes.

Live resource metrics on the dashboard

• LaunchedCPU / RAM / disk / uptime cards backed by live agent heartbeats (30-second cadence).
• LaunchedWeb terminal — JWT-gated ttyd session with a 15-minute token TTL.
• FixedDeploying page sometimes hung at 'awaiting DNS'. It now polls /api/dashboard/vm every 2s and redirects on ready.

nacre.sh public launch

Paying-customer-only provisioning on Hetzner with a zero-idle-cost control plane. <90 seconds from Stripe checkout to a live bot on HTTPS.

• LaunchedFour-tier pricing ladder (Solo / Team / Agency / Scale), billed monthly or yearly.
• LaunchedStripe checkout + webhook pipeline with idempotent VM provisioning.
• LaunchedDedicated single-tenant VMs on Hetzner, Caddy auto-HTTPS, nightly encrypted R2 backups.
• LaunchedGo agent: heartbeat, command execution, log tailing, backup trigger, rollback.