- `transport`, `media`, `e2ee-smoke`, `e2ee-deep`, `e2ee-cli`: sharded full

Matrix coverage.

- `QA-Lab - All Lanes` uses explicit `fast` Matrix on scheduled runs. Manual

dispatch keeps `matrix_profile=all` as the default and can shard full Matrix

with `matrix_profile=all` and `matrix_shards=true`.

dispatch keeps `matrix_profile=all` as the default and always shards that full

Matrix selection.

## QA credentials and 1Password

window when paired with fast or sharded gates

`QA-Lab - All Lanes` uses explicit fast Matrix on scheduled runs; manual

dispatch keeps `matrix_profile=all` as the default and can shard full Matrix

with `matrix_profile=all` and `matrix_shards=true`. `OpenClaw Release Checks`

uses explicit fast Matrix; run the sharded all-lanes workflow when release

investigation needs full Matrix media/E2EE inventory.

dispatch keeps `matrix_profile=all` as the default and always shards that full

Matrix selection. `OpenClaw Release Checks` uses explicit fast Matrix; run the

all-lanes workflow when release investigation needs full Matrix media/E2EE

inventory.

### Reusable Live/E2E Checks

- e2ee-smoke

- e2ee-deep

- e2ee-cli

matrix_shards:

description: Shard matrix_profile=all into parallel Matrix profile jobs

required: false

default: "false"

type: choice

options:

- "false"

- "true"

permissions:

contents: read

run_live_matrix:

name: Run Matrix live QA lane

needs: [authorize_actor, validate_selected_ref]

if: ${{ !(github.event_name == 'workflow_dispatch' && inputs.matrix_profile == 'all' && inputs.matrix_shards == 'true') }}

if: ${{ !(github.event_name == 'workflow_dispatch' && inputs.matrix_profile == 'all') }}

runs-on: blacksmith-32vcpu-ubuntu-2404

timeout-minutes: 60

environment: qa-live-shared

run_live_matrix_sharded:

name: Run Matrix live QA lane (${{ matrix.profile }})

needs: [authorize_actor, validate_selected_ref]

if: ${{ github.event_name == 'workflow_dispatch' && inputs.matrix_profile == 'all' && inputs.matrix_shards == 'true' }}

if: ${{ github.event_name == 'workflow_dispatch' && inputs.matrix_profile == 'all' }}

runs-on: blacksmith-32vcpu-ubuntu-2404

timeout-minutes: 60

environment: qa-live-shared

Telegram and Discord lanes as parallel jobs. The live jobs use the

`qa-live-shared` environment, and Telegram/Discord use Convex leases. Matrix

uses `--profile fast --fail-fast` for scheduled and release gates while the CLI

default and manual workflow input remain `all`; manual all-lanes dispatch can

shard full Matrix coverage into `transport`, `media`, `e2ee-smoke`,

`e2ee-deep`, and `e2ee-cli` jobs. `OpenClaw Release Checks` also runs the

release-critical QA Lab lanes before release approval.

default and manual workflow input remain `all`; manual `matrix_profile=all`

dispatch always shards full Matrix coverage into `transport`, `media`,

`e2ee-smoke`, `e2ee-deep`, and `e2ee-cli` jobs. `OpenClaw Release Checks` also

runs the release-critical QA Lab lanes before release approval.

The `Duplicate PRs After Merge` workflow is a manual maintainer workflow for

post-land duplicate cleanup. It defaults to dry-run and only closes explicitly

live Matrix profile and Telegram QA lane before release approval. The live

lanes use the `qa-live-shared` environment; Telegram also uses Convex CI

credential leases. Run the manual `QA-Lab - All Lanes` workflow with

`matrix_profile=all` and `matrix_shards=true` when you want full Matrix

transport, media, and E2EE inventory in parallel.

`matrix_profile=all` when you want full Matrix transport, media, and E2EE

inventory; the workflow always shards that full Matrix selection in parallel.

- Cross-OS install and upgrade runtime validation is dispatched from the

private caller workflow

`openclaw/releases-private/.github/workflows/openclaw-cross-os-release-checks.yml`,