diff --git a/services/openclaw/configmap.yaml b/services/openclaw/configmap.yaml
index b9be06ca..eb7b65c1 100644
--- a/services/openclaw/configmap.yaml
+++ b/services/openclaw/configmap.yaml
@@ -40,6 +40,7 @@ data:
         "trustedProxies": ["10.42.0.0/16"],
         "controlUi": {
           "enabled": true,
+          "dangerouslyDisableDeviceAuth": true,
           "allowedOrigins": [
             "http://localhost:18789",
             "http://127.0.0.1:18789",
diff --git a/services/openclaw/deployment.yaml b/services/openclaw/deployment.yaml
index 3092188d..2623f78f 100644
--- a/services/openclaw/deployment.yaml
+++ b/services/openclaw/deployment.yaml
@@ -23,7 +23,7 @@ spec:
         ai.bstein.dev/instructions: kubectl-field-selectors
         ai.bstein.dev/role: testing-triage
         ai.bstein.dev/placement: arm64 gateway lane (rpi5 preferred)
-        ai.bstein.dev/config-rev: "20260521-persistent-home-rpi"
+        ai.bstein.dev/config-rev: "20260521-oauth-device-bypass"
     spec:
       serviceAccountName: openclaw-triage
       automountServiceAccountToken: true