diff --git a/.openclaw-sync/source.json b/.openclaw-sync/source.json
index c48d6d5d1..92fcbd925 100644
--- a/.openclaw-sync/source.json
+++ b/.openclaw-sync/source.json
@@ -1,5 +1,5 @@
 {
   "repository": "openclaw/openclaw",
-  "sha": "ce4bb8f6382697b46d7f0d676ddf43afbf432c96",
-  "syncedAt": "2026-04-23T07:30:51.547Z"
+  "sha": "dbcee0bc76ccf7dd65cebb225ed5983399227c3e",
+  "syncedAt": "2026-04-23T07:41:11.273Z"
 }
diff --git a/docs/help/testing.md b/docs/help/testing.md
index c5ca5183d..ffced1e0f 100644
--- a/docs/help/testing.md
+++ b/docs/help/testing.md
@@ -39,6 +39,14 @@ When debugging real providers/models (requires real creds):
 
 - Live suite (models + gateway tool/image probes): `pnpm test:live`
 - Target one live file quietly: `pnpm test:live -- src/agents/models.profiles.live.test.ts`
+- Docker live model sweep: `pnpm test:docker:live-models`
+  - CI coverage: daily `OpenClaw Scheduled Live And E2E Checks` and manual
+    `OpenClaw Release Checks` both call the reusable live/E2E workflow with
+    `include_live_suites: true`, which includes separate Docker live model
+    matrix jobs sharded by provider.
+  - Add new high-signal provider secrets to `scripts/ci-hydrate-live-auth.sh`
+    plus `.github/workflows/openclaw-live-and-e2e-checks-reusable.yml` and its
+    scheduled/release callers.
 - Moonshot/Kimi cost smoke: with `MOONSHOT_API_KEY` set, run
   `openclaw models list --provider moonshot --json`, then run an isolated
   `openclaw agent --local --session-id live-kimi-cost --message 'Reply exactly: KIMI_LIVE_OK' --thinking off --json`