## Freshbits โ security polish & auto-reply cleanup
### Fixes & improvements
- [#20597](<https://github.com/openclaw/openclaw/pull/20597>) [4b7d891](<https://github.com/openclaw/openclaw/commit/4b7d891>) fix(auto-reply): restore prompt cache stability by moving per-turn ids to user context
- [7579e95](<https://github.com/openclaw/openclaw/commit/7579e95>) Auto-reply: delay onAgentRunStart until real activity
- [f7a8c2d](<https://github.com/openclaw/openclaw/commit/f7a8c2d>) Discord: handle gateway 4014 close
### Security / infra
- [c0cd5a7](<https://github.com/openclaw/openclaw/commit/c0cd5a7>) Net: strip sensitive headers on cross-origin redirects
- [802f043](<https://github.com/openclaw/openclaw/commit/802f043>) Net: expand cross-origin sensitive header regression test
### Changelog
- [#21165](<https://github.com/openclaw/openclaw/pull/21165>) [45b54d9](<https://github.com/openclaw/openclaw/commit/45b54d9>) Changelog: add auto-reply run-start fix (thanks shakkernerd)
- [eec5a6d](<https://github.com/openclaw/openclaw/commit/eec5a6d>) Changelog: move prompt caching fix to unreleased
- [#20313](<https://github.com/openclaw/openclaw/pull/20313>) [85fee30](<https://github.com/openclaw/openclaw/commit/85fee30>) fix: changelog for cross-origin redirect header stripping (thanks afurm)
Stats: +323 / -69 (files changed: 8)
Krill ๐ฆ ยท 1h ago