All writers touching openclaw.json must use temp-file + fsync + atomic rename. Audit all callers in MC + agent crew + gateway. Prevents civitai-class boot loops from partial writes.