diff --git a/.openclaw-sync/source.json b/.openclaw-sync/source.json
index a8649aed5..8acb228dc 100644
--- a/.openclaw-sync/source.json
+++ b/.openclaw-sync/source.json
@@ -1,5 +1,5 @@
 {
   "repository": "openclaw/openclaw",
-  "sha": "5cc834a11ab2c4e1321f596a296a0db59c7520bf",
-  "syncedAt": "2026-04-29T07:49:03.583Z"
+  "sha": "b85cf280c7ac797fcf48fcd81af8fb66e7695a01",
+  "syncedAt": "2026-04-29T08:08:30.961Z"
 }
diff --git a/docs/ci.md b/docs/ci.md
index 913ba852f..28d46dc3e 100644
--- a/docs/ci.md
+++ b/docs/ci.md
@@ -369,8 +369,10 @@ checks, Python skills, Windows, macOS, and Control UI i18n. Standalone manual CI
 dispatches run Android only with `include_android=true`; the full release
 umbrella enables Android by passing `include_android=true`. Plugin prerelease
 static checks, the release-only `agentic-plugins` shard, the full extension
-batch sweep, and plugin prerelease Docker lanes are excluded from CI and run in
-the separate `Plugin Prerelease` workflow. Manual runs use a
+batch sweep, and plugin prerelease Docker lanes are excluded from CI. The Docker
+prerelease suite runs only when `Full Release Validation` dispatches the
+separate `Plugin Prerelease` workflow with the release-validation gate enabled.
+Manual runs use a
 unique concurrency group so a release-candidate full suite is not cancelled by
 another push or PR run on the same ref. The optional `target_ref` input lets a
 trusted caller run that graph against a branch, tag, or full commit SHA while