diff --git a/src/agent-sec-core/CHANGELOG.md b/src/agent-sec-core/CHANGELOG.md
index c4bf91df0..25df54ff8 100644
--- a/src/agent-sec-core/CHANGELOG.md
+++ b/src/agent-sec-core/CHANGELOG.md
@@ -1,5 +1,27 @@
 # Changelog
 
+## 0.8.0
+
+**Build & Packaging**
+
+- Installed the Codex plugin during source builds so source deployments include the same Codex integration as packaged installs. (#1302)
+- Updated source build scripts for the sec-core install flow. (#1348)
+- Fixed system-mode source builds by placing uv-managed Python under the shared sec-core library directory and adding a system install smoke check. (#1400)
+
+**Code Scanner**
+
+- Added sensitive file path rules for common agent credentials to block API key exposure. (#1401)
+
+**OpenClaw Plugin**
+
+- Hardened OpenClaw deploy compatibility handling and covered deployment edge cases with unit tests. (#1358)
+- Added an OpenClaw plugin cross-version E2E matrix that validates packaged plugin loading, Gateway flows, policy behavior, and observability across supported OpenClaw hosts. (#1372)
+
+**Documentation**
+
+- Added bilingual agent-sec-core user guide documentation and documentation maintenance rules. (#1311)
+- Documented OpenClaw plugin deployment, compatibility, and upgrade guidance. (#1370)
+
 ## 0.7.1
 
 **Prompt Scanner**
diff --git a/src/agent-sec-core/adapters/component.toml b/src/agent-sec-core/adapters/component.toml
index 0d6362a83..9e76deb1b 100644
--- a/src/agent-sec-core/adapters/component.toml
+++ b/src/agent-sec-core/adapters/component.toml
@@ -3,7 +3,7 @@ anolisa_min_version = "0.1.12"
 
 [component]
 name = "sec-core"
-version = "0.7.1"
+version = "0.8.0"
 layer = "runtime"
 domain = "security"
 description = "Agent security core adapters for OpenClaw and Hermes"
diff --git a/src/agent-sec-core/agent-sec-cli/Cargo.lock b/src/agent-sec-core/agent-sec-cli/Cargo.lock
index b706c1390..767d184a1 100644
--- a/src/agent-sec-core/agent-sec-cli/Cargo.lock
+++ b/src/agent-sec-core/agent-sec-cli/Cargo.lock
@@ -4,7 +4,7 @@ version = 4
 
 [[package]]
 name = "agent-sec-cli"
-version = "0.7.1"
+version = "0.8.0"
 dependencies = [
  "pyo3",
 ]
diff --git a/src/agent-sec-core/agent-sec-cli/Cargo.toml b/src/agent-sec-core/agent-sec-cli/Cargo.toml
index deed97eba..9d16332f3 100644
--- a/src/agent-sec-core/agent-sec-cli/Cargo.toml
+++ b/src/agent-sec-core/agent-sec-cli/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "agent-sec-cli"
-version = "0.7.1"
+version = "0.8.0"
 edition = "2021"
 description = "Agent Security Core CLI - Native Rust extensions"
 license = "Apache-2.0"
diff --git a/src/agent-sec-core/agent-sec-cli/pyproject.toml b/src/agent-sec-core/agent-sec-cli/pyproject.toml
index fef7e5de4..a52338bc5 100644
--- a/src/agent-sec-core/agent-sec-cli/pyproject.toml
+++ b/src/agent-sec-core/agent-sec-cli/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "maturin"
 
 [project]
 name = "agent-sec-cli"
-version = "0.7.1"
+version = "0.8.0"
 description = "Agent Security Core CLI - System hardening, sandbox isolation, and asset integrity verification for AI Agents"
 readme = "README.md"
 license = {text = "Apache-2.0"}
diff --git a/src/agent-sec-core/agent-sec-cli/src/agent_sec_cli/__init__.py b/src/agent-sec-core/agent-sec-cli/src/agent_sec_cli/__init__.py
index cb1b1af10..dd17b625e 100644
--- a/src/agent-sec-core/agent-sec-cli/src/agent_sec_cli/__init__.py
+++ b/src/agent-sec-core/agent-sec-cli/src/agent_sec_cli/__init__.py
@@ -1,3 +1,3 @@
 """Agent Security Core CLI - System hardening, sandbox isolation, and asset integrity verification."""
 
-__version__ = "0.7.1"
+__version__ = "0.8.0"
diff --git a/src/agent-sec-core/agent-sec-cli/src/agent_sec_cli/cli.py b/src/agent-sec-core/agent-sec-cli/src/agent_sec_cli/cli.py
index e6d59087b..65832dc29 100644
--- a/src/agent-sec-core/agent-sec-cli/src/agent_sec_cli/cli.py
+++ b/src/agent-sec-core/agent-sec-cli/src/agent_sec_cli/cli.py
@@ -35,7 +35,7 @@
 
     __version__ = get_version("agent-sec-cli")
 except Exception:
-    __version__ = "0.7.1"  # pragma: no cover
+    __version__ = "0.8.0"  # pragma: no cover
 
 app = typer.Typer(
     name="agent-sec-cli",
diff --git a/src/agent-sec-core/agent-sec-cli/uv.lock b/src/agent-sec-core/agent-sec-cli/uv.lock
index c98f64335..3001c87d7 100644
--- a/src/agent-sec-core/agent-sec-cli/uv.lock
+++ b/src/agent-sec-core/agent-sec-cli/uv.lock
@@ -8,7 +8,7 @@ resolution-markers = [
 
 [[package]]
 name = "agent-sec-cli"
-version = "0.7.1"
+version = "0.8.0"
 source = { editable = "." }
 dependencies = [
     { name = "cryptography" },
diff --git a/src/agent-sec-core/agent-sec-core.spec.in b/src/agent-sec-core/agent-sec-core.spec.in
index 40f6fd257..6ca6d2b61 100644
--- a/src/agent-sec-core/agent-sec-core.spec.in
+++ b/src/agent-sec-core/agent-sec-core.spec.in
@@ -218,6 +218,9 @@ rm -rf $RPM_BUILD_ROOT
 make install-all-for-rpmbuild DESTDIR=$RPM_BUILD_ROOT
 
 %changelog
+* Fri Jul 10 2026 YiZheng Yang <YiZheng.Yang@linux.alibaba.com> - 0.8.0-1
+- Update version to 0.8.0
+
 * Thu Jul 02 2026 YiZheng Yang <YiZheng.Yang@linux.alibaba.com> - 0.7.1-1
 - Update version to 0.7.1
 
diff --git a/src/agent-sec-core/codex-plugin/hooks-plugin/.codex-plugin/plugin.json b/src/agent-sec-core/codex-plugin/hooks-plugin/.codex-plugin/plugin.json
index d7e4e5960..a5128bedb 100644
--- a/src/agent-sec-core/codex-plugin/hooks-plugin/.codex-plugin/plugin.json
+++ b/src/agent-sec-core/codex-plugin/hooks-plugin/.codex-plugin/plugin.json
@@ -1,5 +1,5 @@
 {
   "name": "agent-sec-core",
-  "version": "0.7.1",
+  "version": "0.8.0",
   "description": "Agent security core plugin for Codex - code scanning, prompt scanning, PII checking, and skill ledger integrity verification."
 }
diff --git a/src/agent-sec-core/cosh-extension/cosh-extension.json b/src/agent-sec-core/cosh-extension/cosh-extension.json
index beedfae12..e7f1d6899 100644
--- a/src/agent-sec-core/cosh-extension/cosh-extension.json
+++ b/src/agent-sec-core/cosh-extension/cosh-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "agent-sec-core",
-  "version": "0.7.1",
+  "version": "0.8.0",
   "hooks": {
     "PreToolUse": [
       {
diff --git a/src/agent-sec-core/hermes-plugin/src/plugin.yaml b/src/agent-sec-core/hermes-plugin/src/plugin.yaml
index bb6e0ab18..b4d35c711 100644
--- a/src/agent-sec-core/hermes-plugin/src/plugin.yaml
+++ b/src/agent-sec-core/hermes-plugin/src/plugin.yaml
@@ -1,5 +1,5 @@
 name: agent-sec-core-hermes-plugin
-version: 0.7.1
+version: 0.8.0
 description: "OS-level security guardrails for Hermes Agent — powered by agent-sec-cli"
 provides_hooks:
   - pre_llm_call
diff --git a/src/agent-sec-core/openclaw-plugin/openclaw.plugin.json b/src/agent-sec-core/openclaw-plugin/openclaw.plugin.json
index 2f53e054c..9ef7819b3 100644
--- a/src/agent-sec-core/openclaw-plugin/openclaw.plugin.json
+++ b/src/agent-sec-core/openclaw-plugin/openclaw.plugin.json
@@ -1,7 +1,7 @@
 {
   "id": "agent-sec",
   "name": "Agent Security",
-  "version": "0.7.1",
+  "version": "0.8.0",
   "description": "Security hooks powered by agent-sec-cli",
   "activation": {
     "onCapabilities": ["hook"]
diff --git a/src/agent-sec-core/openclaw-plugin/package-lock.json b/src/agent-sec-core/openclaw-plugin/package-lock.json
index 8897faa6a..b0a7509d8 100644
--- a/src/agent-sec-core/openclaw-plugin/package-lock.json
+++ b/src/agent-sec-core/openclaw-plugin/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "agent-sec-openclaw-plugin",
-  "version": "0.7.1",
+  "version": "0.8.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "agent-sec-openclaw-plugin",
-      "version": "0.7.1",
+      "version": "0.8.0",
       "devDependencies": {
         "@types/node": ">=22",
         "c8": "^10.1.0",
diff --git a/src/agent-sec-core/openclaw-plugin/package.json b/src/agent-sec-core/openclaw-plugin/package.json
index 8279bc6dd..654479dc1 100644
--- a/src/agent-sec-core/openclaw-plugin/package.json
+++ b/src/agent-sec-core/openclaw-plugin/package.json
@@ -1,6 +1,6 @@
 {
   "name": "agent-sec-openclaw-plugin",
-  "version": "0.7.1",
+  "version": "0.8.0",
   "type": "module",
   "main": "dist/index.js",
   "files": [