diff --git a/.openclaw-sync/source.json b/.openclaw-sync/source.json
index b06a807c4..c04f78e47 100644
--- a/.openclaw-sync/source.json
+++ b/.openclaw-sync/source.json
@@ -1,5 +1,5 @@
 {
   "repository": "openclaw/openclaw",
-  "sha": "193c7432e33ffebd560dc7ab632a7ce17cf05fdf",
-  "syncedAt": "2026-04-28T20:53:58.903Z"
+  "sha": "f4a9d34f984a943e89634c462f40d1016c00c427",
+  "syncedAt": "2026-04-28T22:34:36.986Z"
 }
diff --git a/docs/concepts/models.md b/docs/concepts/models.md
index 89820a6a9..0a3d7b41b 100644
--- a/docs/concepts/models.md
+++ b/docs/concepts/models.md
@@ -131,6 +131,12 @@ This happens **before** a normal reply is generated, so the message can feel lik
 
 </Warning>
 
+For local/GGUF models, store the full provider-prefixed ref in the allowlist,
+for example `ollama/gemma4:26b`, `lmstudio/Gemma4-26b-a4-it-gguf`, or the
+exact provider/model shown by `openclaw models list --provider <provider>`.
+Bare local filenames or display names are not enough when the allowlist is
+active.
+
 Example allowlist config:
 
 ```json5