## Release range

- Previous release: `v0.0.113` at `34cad8f2a896efbff8852f92190ad73395d62538`
- Candidate: `ffb09d2596fb2658f8dff881d5e1e425dd1767d6`
- Candidate selection: current-main
- Commits: 135
- Risky files detected: 293

## QA context

### Risky areas

- Workflow and enforcement
- Sandbox, policy, and SSRF
- Credentials and inference
- Installer and bootstrap
- Onboarding and host integration

### Suggested test focus

- Fresh install and upgrade paths
- Onboarding and sandbox creation
- Policy enforcement, network egress, and SSRF protections
- CI checks, pre-commit hooks, and DCO declarations
- Credential storage and inference provider routing

## Canonical release entry

- Path: `docs/changelog/2026-08-23.mdx`
- Entry:

## v0.0.114

NemoClaw v0.0.114 adds deterministic read-only MCP tool calls for LangChain Deep Agents Code and per-stage launch-readiness probe timing.
It strengthens destructive-operation warnings, session export cleanup, sealed configuration recovery, and installation verification.
It also improves managed local inference, Portable and Hermes onboarding, image provenance, and release documentation automation.

- Managed LangChain Deep Agents Code automation can invoke one uniquely registered, coherently read-only MCP tool with `dcode tools call-read-only TOOL --json` without model participation.
- `nemoclaw <name> connect --probe-only`, `nemohermes <name> connect --probe-only`, and `nemo-deepagents <name> connect --probe-only` now report credential-free elapsed time for each readiness stage.
- Sandbox destruction warns before terminating active SSH sessions, and OpenClaw session export reports retained staging artifacts when cleanup fails.
- Snapshot restore preserves sealed OpenClaw configuration, rebuild verifies final configuration integrity, and Shields timer authority retires after lifecycle gates complete.
- Installation fails closed when no SHA-256 verifier is available, and Hermes retries throttled source archive downloads.
- Managed vLLM restores Station model selection, supports explicit host-GPU selection, validates effective GPU-memory requirements, and preserves selected intent across resume.
- Managed llama.cpp images bind lifecycle receipts to published software bill of materials files and isolate platform-specific receipt pulls.
- Ordinary Docker-driver onboarding selects immutable managed-image digests for stock agents, with reviewed Dockerfile fallback when catalog availability prevents selection.
- Static messaging credentials use validated endpointless profiles; stopped Hermes Discord retains only its exact required provider without starting the channel.
- Deep Agents Code progressive disclosure derives loaded MCP tools from the pinned executable catalog and rejects duplicate loaded implementations.
- Portable lifecycle recovery reports fixed-stage timing, and OpenClaw pairing settlement handles missing and already-pending canonical scope upgrades without duplicate approval.
- The maintained `nemoclaw update` request and every redirect require HTTPS.

The repository source entry contains the complete detailed bullets, links, and related PR references.

## Documentation coverage

- Latest included cumulative docs PR: [#10061](https://github.com/NVIDIA/NemoClaw/pull/10061), `docs: complete v0.0.114 release coverage`.
- Final PR commit and merge commit: `d6dcdef0aeaf8d57b980c13b1148516249a1840e` and `ffb09d2596fb2658f8dff881d5e1e425dd1767d6`.
- Final automated refresh coverage commit: `43b4094c5ad3808df7b8a410dc4495b5a502cb3b`, the current-main parent used by the final documentation PR.
- Later commits and merged PRs: only the docs merge `ffb09d2596fb2658f8dff881d5e1e425dd1767d6`; it adds no uncovered product code.
- Changed paths: seven paths, all under `docs/**`.
- Review and checks: PR Review Advisor reported 0 blockers, 0 warnings, and 0 suggestions; CodeRabbit reported no remaining actionable comments; docs validation, preview, CLI parity, CodeQL, sandbox image checks, DCO, commit lint, and repository checks passed. GitHub recorded no submitted human approval, so `reviewDecision` remained `REVIEW_REQUIRED` when a maintainer merged the PR.
- Open managed docs PRs: none.
- Maintainer decision: Proceed with the candidate as shown.

## Base and managed image evidence

- Base-image candidate: `ffb09d2596fb2658f8dff881d5e1e425dd1767d6`
- Evidence: [base-image-publication job 97329796029](https://github.com/NVIDIA/NemoClaw/actions/runs/32692932460/job/97329796029), run 32692932460 attempt 1, completed successfully at `2026-08-24T05:17:58Z` for the candidate.

## General E2E decision

- Newest full run: [run 32684776781](https://github.com/NVIDIA/NemoClaw/actions/runs/32684776781), attempt 1, created `2026-08-24T02:57:43Z`, last updated `2026-08-24T04:25:26Z`, tested `67aab7ef57a8e479da9fe560b3f5e69d7d993370`, completed with failure. [Release qualification](https://github.com/NVIDIA/NemoClaw/actions/runs/32684776781/job/97321614529) failed. The run recorded 21 successful jobs, 73 substantive failed jobs, and 10 skipped jobs.
- Positive jobs in that full run included base-image publication, buildless managed-image onboarding, amd64 and arm64 protected managed-image startup, vLLM Docker storage, OpenClaw plugin EXDEV lifecycle, protected managed-image GPU and local inference, v0.0.36, v0.0.74, and v0.0.89 upgrades, and OpenClaw, Hermes, and Deep Agents MCP development paths.
- Focused positive remediation evidence:
  - [Run 32687775153](https://github.com/NVIDIA/NemoClaw/actions/runs/32687775153): v0.0.55 x86-64 and Arm64 upgrade jobs passed.
  - [Run 32681278628](https://github.com/NVIDIA/NemoClaw/actions/runs/32681278628): inference-routing job passed for PR #10031.
  - [Run 32656039658](https://github.com/NVIDIA/NemoClaw/actions/runs/32656039658): vLLM Docker storage job passed for PR #10019.
  - [Run 32533617900](https://github.com/NVIDIA/NemoClaw/actions/runs/32533617900): interrupted onboarding resume job passed.
  - [Run 32504364196](https://github.com/NVIDIA/NemoClaw/actions/runs/32504364196): OpenClaw rebuild and gateway-token rotation job passed.
  - [Run 32484559396](https://github.com/NVIDIA/NemoClaw/actions/runs/32484559396): OpenClaw channel stop/start job passed.
  - [Run 32445300907](https://github.com/NVIDIA/NemoClaw/actions/runs/32445300907): Docker-backed post-reboot recovery job passed.
  - [Run 32297362244](https://github.com/NVIDIA/NemoClaw/actions/runs/32297362244): native, compatibility-only, and fallback Hermes GPU startup modes passed.
- Maintainer choice: Proceed with the status as shown.

Exceptions: Proceed because focused E2E jobs across the release range passed for managed images, buildless onboarding, inference routing, vLLM storage, lifecycle recovery, messaging lifecycle, MCP development, protected GPU inference, and legacy upgrades. The maintainer accepts the remaining failed general full-suite results and the absence of one successful full run for the final candidate for this tag.