diff --git a/.openclaw-sync/source.json b/.openclaw-sync/source.json
index e1a4efb86..47dff9ce1 100644
--- a/.openclaw-sync/source.json
+++ b/.openclaw-sync/source.json
@@ -1,5 +1,5 @@
 {
   "repository": "openclaw/openclaw",
-  "sha": "629ed9f702a5a79a4cb0775328a5f859eed381c4",
-  "syncedAt": "2026-04-23T19:52:40.032Z"
+  "sha": "648422a6c1c3906db611d39b52bf7a9be9b9d9e5",
+  "syncedAt": "2026-04-23T19:57:04.902Z"
 }
diff --git a/docs/ci.md b/docs/ci.md
index f9abc7acf..49b2ea50e 100644
--- a/docs/ci.md
+++ b/docs/ci.md
@@ -34,8 +34,6 @@ make only small coverage-preserving test performance fixes, then reruns the
 full-suite report and rejects changes that reduce the passing baseline test
 count. If the baseline has failing tests, Codex may fix only obvious failures
 and the after-agent full-suite report must pass before anything is committed.
-It uses GitHub-hosted Ubuntu so the Codex action can keep the same drop-sudo
-safety posture as the docs agent.
 
 ```bash
 gh workflow run duplicate-after-merge.yml \