[Bug] Authentication failure with rotated 1Password token causes session interruption and model downgrade

Open 💬 0 comments Opened Jun 10, 2026 by ianbmacdonald

Bug Description
I rotated my 1Password vault token in the background (adding more vaults for a new project) and my Fable session tripped on an auth that was invalid in auto mode ; It couldn't read the secret; needed rotation.

``op read 'op://Vault/service/secret')``

<img width="2512" height="136" alt="Image" src="https://github.com/user-attachments/assets/17e92b94-521e-4fc6-a6a4-e4f4dca35298" />

I exited, updated the token in the env, resumed and told it to continue, and a turn or two later it said a message violated terms, and dropped back to Opus 4.8.

<img width="2958" height="524" alt="Image" src="https://github.com/user-attachments/assets/f852977b-9afb-4e3c-8767-e5b55c5d6deb" />

Environment Info

  • Platform: Ubuntu 26.04
  • Terminal: tmux
  • Version: 2.1.170
  • Feedback ID: d07f843d-268a-44cc-a39f-e8c2faaa7d32

Context
Infrastructure training harness, it was power cycling a device, to restart to a known good state to allow a local model another run of an unsupervised staging workflow running inside an openclaw pi-coding-agent dev-agent sandbox.

I am just guessing the token rotation is related, but I suppose it is possible Fable 5 thought my training harness looked like some kind of malicious workflow. ~~Anyways, good news is it decided to stop a few turns later to share some findings, and I just popped it back into Fable 5 (at the expense of some cached tokens). ~~

Update:
As I was writing this bug report it happened again ;

<img width="3704" height="804" alt="Image" src="https://github.com/user-attachments/assets/4ed5acf0-93e9-42d3-9fe8-c523114259b2" />

And then a few turns later again. It seems the same message that caused the initial stop is being seen again in context and re-triggering the issue; the few turn delay is just the cache and thinking turns. Makes sense, it doesn't purge, it just goes to a lessor model, leaves the trigger in-context.

A new skill may be required just like cc-claude-rescue for browser agent images .. "go back into session JSONL and remove the turn right before the safety measure flagged". This might allow a session to recover and get back to Fable 5 once this happens

View original on GitHub ↗