docs: add v0.0.94 release entry

[prekshivyas]

Summary

This PR adds the canonical dated release entry for NemoClaw v0.0.94 before the tag is cut.
The entry reconciles all 26 commits since v0.0.93 and links each user-visible change to its owning documentation.

Changes

• Add docs/changelog/2026-07-24.mdx with the exact ## v0.0.94 heading, parser-safe SPDX comment, release summary, and detailed bullets.
• Record sandbox restore and update behavior, onboarding and inference changes, network policy behavior, security evidence, Hermes build performance, DGX Station guidance, and E2E validation changes.
• Preserve docs/ as the source of truth without changing the AI-agent documentation routing skill.
• Use E2E run 30075443016 for release QA evidence at exact tested SHA 04e6dfa883071dda9df429c66e73168e1a995cba.

Source summary

• #7461 -> docs/changelog/2026-07-24.mdx: Record the ownership-preserving Hermes image layer reduction and hosted timing comparison.
• #7460 -> docs/changelog/2026-07-24.mdx: Record removal of candidate Hermes swap setup from E2E validation.
• #7458 -> docs/security/fern-5.80.1-dependency-review.md, docs/changelog/2026-07-24.mdx: Record the reviewed Fern CLI update.
• #7457 -> docs/changelog/2026-07-24.mdx: Record periodic runner-pressure telemetry.
• #7455 -> docs/changelog/2026-07-24.mdx: Record non-blocking absent Fern previews.
• #7450 -> docs/changelog/2026-07-24.mdx: Record stable cancellation handling for live-test child processes.
• #7449 -> docs/changelog/2026-07-24.mdx: Record parallel plugin EXDEV coverage.
• #7448 -> docs/changelog/2026-07-24.mdx: Record isolated long-running E2E lanes.
• #7444 -> docs/changelog/2026-07-24.mdx: Record exact-head Hermes swap validation.
• #7437 -> docs/manage-sandboxes/backup-restore.mdx, docs/changelog/2026-07-24.mdx: Record gateway pairing and authenticated verification after cross-sandbox restore.
• #7436 -> docs/manage-sandboxes/backup-restore.mdx, docs/reference/commands.mdx, docs/changelog/2026-07-24.mdx: Record selected stale-state cleanup and Hermes virtual-environment access repair.
• #7385 -> docs/network-policy/customize-network-policy.mdx, docs/changelog/2026-07-24.mdx: Record the read-only agent-variant route check.
• #7371 -> docs/changelog/2026-07-24.mdx: Record host-artifact verification for session exports.
• #7359 -> docs/changelog/2026-07-24.mdx: Record platform validation for managed vLLM model overrides.
• #7356 -> docs/changelog/2026-07-24.mdx: Record token-shaped value redaction for sandbox doctor --json.
• #7354 -> docs/security/advisory-early-warning.md, docs/changelog/2026-07-24.mdx: Record advisory correlation and retained audit provenance.
• #7352 -> docs/network-policy/customize-network-policy.mdx, docs/network-policy/integration-policy-examples.mdx, docs/reference/commands.mdx, docs/changelog/2026-07-24.mdx: Record preset reapplication and bounded tls: skip guidance.
• #7345 -> docs/security/openclaw-2026.6.10-dependency-review.md, docs/security/openclaw-2026.7.1-dependency-review.md, docs/changelog/2026-07-24.mdx: Record reviewed npm audit exception enforcement.
• #7340 -> docs/network-policy/customize-network-policy.mdx, docs/changelog/2026-07-24.mdx: Record the repaired CLI-reference route.
• #7334 -> docs/get-started/dgx-station-preparation.mdx, docs/changelog/2026-07-24.mdx: Record the qualified OTA metadata fallback and narrowed override wording.
• #7322 -> docs/changelog/2026-07-24.mdx: Reconcile the gateway source tag added to plugin registration banners.
• #7284 -> docs/manage-sandboxes/update-sandboxes.mdx, docs/changelog/2026-07-24.mdx: Record read-only upgrade-sandboxes --check behavior and recorded-gateway selection.
• #7277 -> docs/changelog/2026-07-24.mdx: Reconcile deterministic gateway TCP refusal coverage.
• #7234 -> docs/reference/troubleshooting.mdx, docs/changelog/2026-07-24.mdx: Record preserved DGX Spark managed vLLM Express intent on resume.
• #7185 -> docs/reference/troubleshooting.mdx, docs/changelog/2026-07-24.mdx: Record IPv4 fallback DNS selection and exact resolver probing.
• #6820 -> docs/reference/commands.mdx, docs/changelog/2026-07-24.mdx: Record the versioned, redacted --events=jsonl onboarding stream.

Type of Change

• Code change (feature, bug fix, or refactor)
• Code change with doc updates
• Doc only (prose changes, no code sample modifications)
• Doc only (includes code sample changes)

Quality Gates

• Tests added or updated for changed behavior
• Existing tests cover changed behavior — justification: npx vitest run test/changelog-docs.test.ts passed 6/6 tests.
• Tests not applicable — justification:
• Docs updated for user-facing behavior changes
• Docs not applicable — justification:
• Sensitive paths changed (security, policy, credentials, preflight, onboarding, inference, runner, sandbox, or messaging)
• Sensitive-path review completed or maintainer-approved waiver recorded — reviewer/approval link/justification:
• Non-success, skipped, or missing CI check accepted by maintainer — check name, approval link, and follow-up issue:

Documentation Writer Review

• Documentation writer subagent reviewed the completed changes
• Result: docs-updated
• Evidence: docs/changelog/2026-07-24.mdx; the writing rules, documentation style, exact release range, skip terms, published routes, and product scope were reviewed; the changelog test passed 6/6; npm run docs passed with route checking OK, zero errors, and two existing warnings.
• Agent: Codex Desktop

DGX Station Hardware Evidence

• Tested on DGX Station
• Tested commit: Not applicable
• Station profile/scenario: Not applicable
• Result: Not applicable
• Supporting evidence: Not applicable. This PR does not change scripts/prepare-dgx-station-host.sh.

Verification

• PR description includes a Signed-off-by: line and every commit appears as Verified in GitHub
• Normal pre-commit, commit-msg, and pre-push hooks passed, or npm run check:diff passed when hooks were skipped or unavailable
• Targeted behavior tests pass for the current change set, or tests are marked not applicable above — npx vitest run test/changelog-docs.test.ts passed 6/6 tests.
• Applicable broad gate passed — npm test for broad runtime/test-harness changes; npm run check for repo-wide validation/coverage changes — command/result: Not applicable to the dated changelog entry.
• Quality Gates section completed with required justifications or waivers
• No secrets, API keys, or credentials committed
• npm run docs builds without warnings (doc changes only). The build passed with zero errors and two existing Fern warnings.
• Doc pages follow the style guide (doc changes only)
• New doc pages include SPDX header and frontmatter (new pages only). Native dated changelog entries use the required parser-safe MDX SPDX comment and no frontmatter.

---

Signed-off-by: Prekshi Vyas prekshiv@nvidia.com

Summary by CodeRabbit

• Documentation
  • Added the v0.0.94 release changelog.
  • Documented improvements to sandbox snapshot and restore behavior.
  • Added updates for gateway selection, policy comparisons, onboarding event output, and DGX recovery workflows.
  • Documented enhanced diagnostics redaction, npm audit provenance, image assembly performance, and validation stability improvements.

[github-actions]

🌿 Preview your docs: https://nvidia-preview-pr-7468.docs.buildwithfern.com/nemoclaw

[github-actions]

PR Review Advisor — Informational

Advisor assessment: Informational / high confidence
Next action: No advisor follow-up needed.
Findings: 0 blockers · 0 warnings · 0 suggestions
Status: No actionable findings remain in the canonical review ledger.

Model lanes

• GPT-5.6 Terra (primary): Completed · high confidence · 0 blockers · 0 warnings · 0 suggestions
• Nemotron 3 Ultra (second opinion): Completed · high confidence · 0 blockers · 0 warnings · 0 suggestions
• Model comparison: normalized findings match; normalized E2E selections differ; severity counts match.

Nemotron output stays in workflow artifacts and does not change the assessment above.

E2E guidance

Advisory only. E2E / PR Gate selects and runs jobs independently.

Recommended E2E: None

1 optional E2E recommendation

• docs-validation

Workflow run details

This automated review informs maintainers. Warnings and suggestions do not require a response. A maintainer decides whether to merge.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 096b9414-f077-4d59-bd40-466361f250ad

📥 Commits

Reviewing files that changed from the base of the PR and between 04e6dfa and 65368f9.

📒 Files selected for processing (1)

• docs/changelog/2026-07-24.mdx

---

📝 Walkthrough

Walkthrough

Adds the v0.0.94 NemoClaw changelog entry, covering sandbox and CLI behavior, onboarding, DGX recovery, audit handling, Hermes builds, E2E validation, and Fern documentation validation.

Changes

NemoClaw v0.0.94 release notes

Layer / File(s)	Summary
Release changelog docs/changelog/2026-07-24.mdx	Adds release notes for sandbox restore behavior, CLI and onboarding updates, DGX recovery, audit improvements, Hermes image assembly, Live E2E validation, and Fern documentation validation.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main change: adding the v0.0.94 release entry to docs.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/release-v0.0.94-docs

---

_{Comment @coderabbitai help to get the list of available commands.}