release: v2026.4.2.0128 — Security tiers + approval fatigue fix

- Exec approval fatigue: config templates set ask=off by default
- Security tiers: Low=off, Recommended=on-miss, Maximum=strict
- Bug fix: security-tier.mjs writes ask to openclaw.json
- Docker entrypoint: EVERCLAW_SECURITY_TIER wired on startup
- 68 new unit tests for tiers, templates, and CLI
- OpenClaw v2026.4.1 pinned in Dockerfile

Author: DavidAJohnston

CHANGELOG.md

@@ -2,7 +2,7 @@
 
 All notable changes to EverClaw are documented here.
 
-## [2026.4.2.0002] - 2026-04-02
+## [2026.4.2.0128] - 2026-04-02
 
 ### Fixed — Exec Approval Fatigue
 - **Config templates now set `tools.exec.ask: "off"`** — All 3 config templates (mac, linux, gateway-only) now include `tools.exec` settings so new installs don't default to prompting on every command.

Dockerfile

@@ -131,7 +131,7 @@ RUN chmod +x /app/docker-entrypoint.sh
 
 # ─── Environment ──────────────────────────────────────────────────────────────
 
-ARG EVERCLAW_VERSION=2026.4.2.0002
+ARG EVERCLAW_VERSION=2026.4.2.0128
 ENV EVERCLAW_VERSION=${EVERCLAW_VERSION}
 ENV NODE_ENV=production
 ENV EVERCLAW_PROXY_PORT=8083

docker-compose.yml

@@ -13,7 +13,7 @@
 
 services:
   everclaw:
-    image: ghcr.io/everclaw/everclaw:2026.4.2.0002
+    image: ghcr.io/everclaw/everclaw:2026.4.2.0128
     build:
       context: .
       dockerfile: Dockerfile

package.json

@@ -1,6 +1,6 @@
 {
   "name": "everclaw",
-  "version": "2026.4.2.0002",
+  "version": "2026.4.2.0128",
   "type": "module",
   "description": "Open-source first AI inference via Morpheus decentralized network",
   "scripts": {