diff --git a/.openclaw-sync/source.json b/.openclaw-sync/source.json
index e72e250e9..0b0bcdf59 100644
--- a/.openclaw-sync/source.json
+++ b/.openclaw-sync/source.json
@@ -1,5 +1,5 @@
 {
   "repository": "openclaw/openclaw",
-  "sha": "828b6be39d85b38a4d7b8ceba117cd7415742e1a",
-  "syncedAt": "2026-05-04T21:19:47.909Z"
+  "sha": "0908f3d538969c355616069e92de03bab0e789b9",
+  "syncedAt": "2026-05-04T22:16:55.367Z"
 }
diff --git a/docs/concepts/models.md b/docs/concepts/models.md
index 4b14320ee..62d5bf07a 100644
--- a/docs/concepts/models.md
+++ b/docs/concepts/models.md
@@ -119,7 +119,8 @@ openclaw config set agents.defaults.models '{"openai/gpt-5.4":{}}' --strict-json
 If `agents.defaults.models` is set, it becomes the **allowlist** for `/model` and for session overrides. When a user selects a model that isn't in that allowlist, OpenClaw returns:
 
 ```
-Model "provider/model" is not allowed. Use /model to list available models.
+Model "provider/model" is not allowed. Use /models to list providers, or /models <provider> to list models.
+Add it with: openclaw config set agents.defaults.models '{"provider/model":{}}' --strict-json --merge
 ```
 
 <Warning>
@@ -131,6 +132,8 @@ This happens **before** a normal reply is generated, so the message can feel lik
 
 </Warning>
 
+When the rejected command included a runtime override such as `/model openai/gpt-5.5 --runtime codex`, fix the allowlist first, then retry the same `/model ... --runtime ...` command. For native Codex execution, the selected model is still `openai/gpt-5.5`; the `codex` runtime selects the harness and uses Codex auth separately.
+
 For local/GGUF models, store the full provider-prefixed ref in the allowlist,
 for example `ollama/gemma4:26b`, `lmstudio/Gemma4-26b-a4-it-gguf`, or the
 exact provider/model shown by `openclaw models list --provider <provider>`.
diff --git a/docs/help/faq-models.md b/docs/help/faq-models.md
index c2de0dc49..e308029a9 100644
--- a/docs/help/faq-models.md
+++ b/docs/help/faq-models.md
@@ -191,11 +191,14 @@ troubleshooting, see the main [FAQ](/help/faq).
     session overrides. Choosing a model that isn't in that list returns:
 
     ```
-    Model "provider/model" is not allowed. Use /model to list available models.
+    Model "provider/model" is not allowed. Use /models to list providers, or /models <provider> to list models.
+    Add it with: openclaw config set agents.defaults.models '{"provider/model":{}}' --strict-json --merge
     ```
 
     That error is returned **instead of** a normal reply. Fix: add the model to
     `agents.defaults.models`, remove the allowlist, or pick a model from `/model list`.
+    If the command also included `--runtime codex`, add the model first and then retry
+    the same `/model provider/model --runtime codex` command.
 
   </Accordion>