openclaw - 💡(How to fix) Fix Subagent spawning broken on v2026.3.28 - pairing required on loopback

Bug Description

sessions_spawn with runtime=subagent fails 100% of the time with WebSocket 1008 pairing required on v2026.3.28.

Exact error:

• Gateway target: ws://127.0.0.1:18789
• Source: local loopback
• Bind: loopback
• Auth mode: token
• Error: gateway closed (1008): pairing required

Gateway logs show: client=gateway-client trying to scope-upgrade from operator.read to operator.admin, denied with pairing required.

Steps to Reproduce

1. Run OpenClaw v2026.3.28 with local gateway
2. From main agent session, call sessions_spawn with runtime=subagent and any task
3. Observe immediate failure with 1008 pairing required

Environment

• OpenClaw version: 2026.3.28
• OS: Windows 11
• Gateway bind: loopback
• Auth mode: token

Additional Context

This is a confirmed regression. Related open issues: #59428, #70195, #67799, #67400 all report identical symptoms.

Regression timeline:

• Worked: v2026.2.17 and earlier
• Broken: since approximately v2026.3.28
• Still broken: v2026.4.15 (per #70195)

Workaround: None. All tasks must run inline in main session.