## Release range

- Previous release: `v0.0.122` at `48cefc6f53bc158fae59ee319718fc00345f660a`
- Candidate: `f75f722bb4a1ec9642c8df36c8924e24500d78f0`
- Candidate selection: current-main
- Commits: 76
- Risky files detected: 373

## QA context

### Risky areas

- Workflow / enforcement
- Onboarding / host glue
- Sandbox / policy / SSRF
- Installer / bootstrap
- Credentials / inference

### Suggested test focus

- Fresh install and upgrade paths
- Onboarding wizard and sandbox creation
- Policy enforcement, network egress, and SSRF protections
- CI checks, pre-commit hooks, and DCO declarations
- Credential storage and inference provider routing

## Canonical release entry

- Path: `docs/changelog/2026-09-10.mdx`
- Entry:

## v0.0.123

NemoClaw v0.0.123 expands configuration export for managed OpenClaw and Hermes sandboxes.
It adds an experimental external-component onboarding contract and improves installer recovery, sandbox lifecycle handling, and inference diagnostics.

- `nemoclaw config export` now exports canonical managed Hermes sandboxes, including verified API-key authentication and nondefault interface settings.
  OAuth authentication and Hermes tool gateways remain outside the export contract.
  Related changes: [PR #11323](https://github.com/NVIDIA/NemoClaw/pull/11323), [PR #11450](https://github.com/NVIDIA/NemoClaw/pull/11450), and [PR #11477](https://github.com/NVIDIA/NemoClaw/pull/11477).
  Refer to the [NemoClaw CLI Commands Reference](/user-guide/hermes/reference/commands).
- OpenClaw configuration export now preserves managed Brave Search references, proxy settings, hosted inference tuning, execution settings, dashboard settings, direct tool disclosure, and local conversation diagnostics.
  It also supports one read-only secondary agent that shares the primary hosted inference route.
  Local Ollama export preserves verified daemon and proxy ports.
  Export verifies live and retained configuration evidence and writes credential references instead of secret values.
  Related changes: [PR #11384](https://github.com/NVIDIA/NemoClaw/pull/11384), [PR #11387](https://github.com/NVIDIA/NemoClaw/pull/11387), [PR #11383](https://github.com/NVIDIA/NemoClaw/pull/11383), [PR #11429](https://github.com/NVIDIA/NemoClaw/pull/11429), [PR #11430](https://github.com/NVIDIA/NemoClaw/pull/11430), [PR #11431](https://github.com/NVIDIA/NemoClaw/pull/11431), [PR #11473](https://github.com/NVIDIA/NemoClaw/pull/11473), and [PR #11478](https://github.com/NVIDIA/NemoClaw/pull/11478).
  Refer to the [NemoClaw CLI Commands Reference](/user-guide/openclaw/reference/commands) for the supported export profiles and their limits.
- Fresh onboarding on Linux can register one experimental external host component with a NemoClaw-managed Docker-driver gateway.
  NemoClaw validates the declaration before gateway changes and verifies sandbox identity and effective policy before activation.
  Failed or ambiguous activation preserves the sandbox and records incomplete state; resume and automatic activation retries are unsupported.
  NemoClaw does not manage the component service or its credentials.
  Related changes: [PR #11366](https://github.com/NVIDIA/NemoClaw/pull/11366) and [PR #11471](https://github.com/NVIDIA/NemoClaw/pull/11471).
  Refer to [Register an External Component During Onboarding](/user-guide/openclaw/deployment/register-external-component).
- The installer now attempts existing sandbox recovery before generic host admission and preserves each sandbox's recorded GPU selection.
  It distinguishes confirmed recovery from missing sandboxes or unconfirmed recovery output, and reports warnings instead of claiming complete recovery.
  Fresh onboarding and required DGX Station reconciliation still require host admission.
  Related change: [PR #10397](https://github.com/NVIDIA/NemoClaw/pull/10397).
  Refer to [Update Sandboxes](/user-guide/openclaw/manage-sandboxes/operate-sandboxes/update-sandboxes).
- Sandbox status now distinguishes an intentional stop from a failure, and connect directs you to start a stopped sandbox.
  Portable Hermes start, stop, and recovery use OpenShell for lifecycle changes and verify the receipt-owned Podman container afterward.
  Portable lifecycle operations share the same lock authority, including the host fence during startup.
  Related changes: [PR #11211](https://github.com/NVIDIA/NemoClaw/pull/11211), [PR #11336](https://github.com/NVIDIA/NemoClaw/pull/11336), [PR #11482](https://github.com/NVIDIA/NemoClaw/pull/11482), and [PR #11490](https://github.com/NVIDIA/NemoClaw/pull/11490).
  Refer to [Recover and Rebuild Sandboxes](/user-guide/hermes/manage-sandboxes/operate-sandboxes/recover-and-rebuild-sandboxes).
- NVIDIA Endpoints validation now checks the selected inference route.
  Onboarding and sandbox status identify the account-access cause when NVIDIA returns a matching model-access 404, without exposing the response body in status diagnostics.
  Docker readiness failures identify authority conflicts, and GPU-mode probe failures retain the Docker failure reason.
  Non-interactive onboarding resolves the sandbox name before provider selection.
  Related changes: [PR #10957](https://github.com/NVIDIA/NemoClaw/pull/10957), [PR #11393](https://github.com/NVIDIA/NemoClaw/pull/11393), [PR #11280](https://github.com/NVIDIA/NemoClaw/pull/11280), and [PR #11442](https://github.com/NVIDIA/NemoClaw/pull/11442).
  Refer to [Verify the Sandbox Inference Route](/user-guide/openclaw/inference/validate-inference/verify-inference-route) and [System Readiness](/user-guide/openclaw/reference/system-readiness).
- Removing Teams now removes Teams-owned Microsoft login credential bindings from matching Outlook policy endpoints.
  It refuses to remove bindings owned by another integration.
  Related change: [PR #10846](https://github.com/NVIDIA/NemoClaw/pull/10846).
  Refer to the [NemoClaw CLI Commands Reference](/user-guide/openclaw/reference/commands).

## Documentation coverage

- Latest included cumulative docs PR: [#11447](https://github.com/NVIDIA/NemoClaw/pull/11447) — docs: prepare v0.0.123 documentation
- Final PR commit and merge commit: `14f5c052852edf38ec90c0c784d4905b65ed6dba` / `f75f722bb4a1ec9642c8df36c8924e24500d78f0`
- Final automated refresh coverage commit: `74c628ef625177a0dc3a227accdc0379bfd1e252`
- Later commits and merged PRs:
  - `f75f722bb4a1ec9642c8df36c8924e24500d78f0` docs: prepare v0.0.123 documentation (#11447) — [PR #11447](https://github.com/NVIDIA/NemoClaw/pull/11447)
  - `e0273c244c0e96ab35bd1d3c962c3802633d67e7` fix(acp): complete lifecycle review repairs (#11458) — [PR #11458](https://github.com/NVIDIA/NemoClaw/pull/11458)
  - `72c66fb503b20dcf74070b890319c060cd469219` fix(ci): use supported protected audit verifier flag (#11522) — [PR #11522](https://github.com/NVIDIA/NemoClaw/pull/11522)
  - `c9723701a88153d578f218d1e7b4124257c99bbe` feat(onboard): support providerless component onboarding (#11508) — [PR #11508](https://github.com/NVIDIA/NemoClaw/pull/11508)
  - `0e14405b43dc09cb6dddd0751d5aac15c2cf0291` fix(hermes): repair Tavily credential setup (#11419) — [PR #11419](https://github.com/NVIDIA/NemoClaw/pull/11419)
  - `189043e740fdab61c8c3fdf6fe9407f438e4d955` fix(policy): preserve Open tier messaging defaults (#11457) — [PR #11457](https://github.com/NVIDIA/NemoClaw/pull/11457)
  - `a83f631d44fd6166862d9c6e1cd9c428c7c0044f` fix(test): remove duplicate host fence imports (#11519) — [PR #11519](https://github.com/NVIDIA/NemoClaw/pull/11519)
  - `08f32711ebfb7830565c086321ab18deb2f1020d` fix(install): recognize generation-first DGX Station firmware (#11480) — [PR #11480](https://github.com/NVIDIA/NemoClaw/pull/11480)
  - `2f535d32e82ecf5291d09611a91cc56fbb6e6ea0` test(runtime): hold host fence in provider stop fixtures (#11506) — [PR #11506](https://github.com/NVIDIA/NemoClaw/pull/11506)
  - `e05c08844bfb305c2d116f0cf0ea47ff0bae1587` feat(ci): publish review queue E2E evidence (#11495) — [PR #11495](https://github.com/NVIDIA/NemoClaw/pull/11495)
  - `1279b2f1b35790b767ff8252d9fa6e969d5f7d0f` fix(e2e): retry serialized portable lock loser (#11505) — [PR #11505](https://github.com/NVIDIA/NemoClaw/pull/11505)
- Changed paths: `docs/changelog/2026-09-10.mdx`, `docs/reference/commands.mdx`. Allowed documentation paths only: True.
- Review and checks: APPROVED; final PR commit verified against commit history. Independent writer review approved the final commit. All nine Advisor specialists completed, with no remaining actionable finding. CodeRabbit skipped the bot-authored PR.
  - [request](https://github.com/NVIDIA/NemoClaw/actions/runs/34571161411/job/103173394071): COMPLETED / SKIPPED
  - [label-release-target](https://github.com/NVIDIA/NemoClaw/actions/runs/34572743021/job/103178227245): COMPLETED / SUCCESS
  - [changes](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163851/job/103173374021): COMPLETED / SUCCESS
  - [Analyze (go)](https://github.com/NVIDIA/NemoClaw/actions/runs/34571161087/job/103173368075): COMPLETED / SUCCESS
  - [Docs / Validate and publish PR preview](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163830/job/103173373479): COMPLETED / SUCCESS
  - [Docs / Verify CLI and installer reference parity](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163760/job/103173373038): COMPLETED / SUCCESS
  - [codebase-growth-guardrails](https://github.com/NVIDIA/NemoClaw/actions/runs/34571161965/job/103173367511): COMPLETED / SUCCESS
  - [commit-lint](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163753/job/103173372983): COMPLETED / SUCCESS
  - [require-maintainer-edits](https://github.com/NVIDIA/NemoClaw/actions/runs/34571161980/job/103173367674): COMPLETED / SUCCESS
  - [dco-check](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163782/job/103173372852): COMPLETED / SUCCESS
  - [CodeQL (javascript-typescript)](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163761/job/103173372818): COMPLETED / SUCCESS
  - [package-openshell-sdk](https://github.com/NVIDIA/NemoClaw/actions/runs/34571161971/job/103173367790): COMPLETED / SUCCESS
  - [check-hash](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163774/job/103173373381): COMPLETED / SUCCESS
  - [Analyze (javascript-typescript)](https://github.com/NVIDIA/NemoClaw/actions/runs/34571161087/job/103173368091): COMPLETED / SUCCESS
  - [CodeQL (python)](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163761/job/103173372610): COMPLETED / SUCCESS
  - [Analyze (python)](https://github.com/NVIDIA/NemoClaw/actions/runs/34571161087/job/103173367946): COMPLETED / SUCCESS
  - [docs-only-checks](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163851/job/103173423757): COMPLETED / SUCCESS
  - [ShellCheck SARIF](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163761/job/103173372807): COMPLETED / SUCCESS
  - [hugging-face-models](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163851/job/103173425355): COMPLETED / SKIPPED
  - [openshell-sdk-package](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163851/job/103173424940): COMPLETED / SKIPPED
  - [reviewed-npm-audit](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163851/job/103173425097): COMPLETED / SKIPPED
  - [static-checks](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163851/job/103173425641): COMPLETED / SKIPPED
  - [compile-artifacts](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163851/job/103173425991): COMPLETED / SKIPPED
  - [installer-integration](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163851/job/103173425485): COMPLETED / SKIPPED
  - [plugin-tests](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163851/job/103173425716): COMPLETED / SKIPPED
  - [build-typecheck](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163851/job/103173425776): COMPLETED / SKIPPED
  - [cli-test-shards](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163851/job/103173425989): COMPLETED / SKIPPED
  - [cli-tests](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163851/job/103173426838): COMPLETED / SKIPPED
  - [checks](https://github.com/NVIDIA/NemoClaw/actions/runs/34571163851/job/103173730666): COMPLETED / SUCCESS
  - [CodeQL](https://github.com/NVIDIA/NemoClaw/runs/103173646892): COMPLETED / SUCCESS
  - [ShellCheck](https://github.com/NVIDIA/NemoClaw/runs/103173559141): COMPLETED / SUCCESS
  - CodeRabbit: SUCCESS / SUCCESS
- Open managed docs PRs: None.
- Maintainer decision: Proceed with the candidate as shown.

## Base and managed image evidence

- Base-image candidate: `f75f722bb4a1ec9642c8df36c8924e24500d78f0`
- Evidence: completed / success; verified candidate check, job identity, and owning workflow attempt.
- Workflow: [34572743531](https://github.com/NVIDIA/NemoClaw/actions/runs/34572743531), attempt 1; `.github/workflows/e2e.yaml`; main; push.
- Successful verifier: [base-image-publication](https://github.com/NVIDIA/NemoClaw/actions/runs/34572743531/job/103197191798); started 2026-09-11T08:21:17Z; completed 2026-09-11T08:22:35Z.

## General E2E decision

- Latest identifiable full main run: [34517665592](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592), attempt 1.
- Tested commit: `8d6643be25fb9ae80f6e2357b45b69ef4f3e0416`; differs from candidate `f75f722bb4a1ec9642c8df36c8924e24500d78f0`.
- Status: completed; conclusion: failure.
- Created: 2026-09-10T18:59:17Z; started: 2026-09-10T18:59:17Z; last updated: 2026-09-10T20:26:24Z.
- Inspected: 2026-09-11T08:25:47+00:00; age since creation: 13:26:30.
- Release qualification and non-successful jobs:
  - [openclaw-plugin-runtime-exdev](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007901656): completed / failure; started 2026-09-10T19:01:45Z; completed 2026-09-10T19:09:02Z.
  - [Exact staging Brev Launchable identity](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007901760): completed / skipped; started 2026-09-10T19:01:42Z; completed 2026-09-10T19:01:41Z.
  - [Hermes E2E (docker)](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007901847): completed / failure; started 2026-09-10T19:01:45Z; completed 2026-09-10T19:10:51Z.
  - [retired-selector-compatibility](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007902028): completed / skipped; started 2026-09-10T19:01:42Z; completed 2026-09-10T19:01:41Z.
  - [Compile protected llama.cpp DGX Spark plan](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007902211): completed / skipped; started 2026-09-10T19:01:42Z; completed 2026-09-10T19:01:41Z.
  - [native-runtime-qualification-producer-plan](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007902298): completed / skipped; started 2026-09-10T19:01:42Z; completed 2026-09-10T19:01:41Z.
  - [jetson-nvmap-gpu](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007902752): completed / skipped; started 2026-09-10T19:01:42Z; completed 2026-09-10T19:01:41Z.
  - [external-gateway-health](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007903225): completed / skipped; started 2026-09-10T19:01:42Z; completed 2026-09-10T19:01:41Z.
  - [Exact staging Brev Launchable](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007904916): completed / failure; started 2026-09-10T19:01:46Z; completed 2026-09-10T19:43:49Z.
  - [Search: OpenClaw returns a Brave result without exposing its key (docker) / Brave and NVIDIA inference API keys](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007906416): completed / failure; started 2026-09-10T19:01:45Z; completed 2026-09-10T19:04:36Z.
  - [Network policy: enforces restricted allow and deny rules (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007907667): completed / failure; started 2026-09-10T19:01:46Z; completed 2026-09-10T19:05:41Z.
  - [Gateway: restores the guard chain after recreation (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007908286): completed / failure; started 2026-09-10T19:01:46Z; completed 2026-09-10T19:07:06Z.
  - [Rebuild: preserves Hermes state and recovers cron dispatch (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007908404): completed / failure; started 2026-09-10T19:01:46Z; completed 2026-09-10T20:13:13Z.
  - [Rebuild: refreshes a stale Hermes base and restores state (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007908576): completed / failure; started 2026-09-10T19:01:45Z; completed 2026-09-10T20:13:10Z.
  - [Security: Hermes retains the required sandbox posture (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007908650): completed / failure; started 2026-09-10T19:01:45Z; completed 2026-09-10T19:11:24Z.
  - [Protected llama.cpp on NVIDIA DGX Spark](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007909815): completed / skipped; started 2026-09-10T19:01:43Z; completed 2026-09-10T19:01:43Z.
  - [Build pinned native Podman toolchain / ${{ matrix.architecture }}](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007910975): completed / skipped; started 2026-09-10T19:01:43Z; completed 2026-09-10T19:01:43Z.
  - [matrix.jobName](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007917330): completed / skipped; started 2026-09-10T19:01:44Z; completed 2026-09-10T19:01:44Z.
  - [Aggregate native runtime qualification evidence](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103007922669): completed / skipped; started 2026-09-10T19:01:45Z; completed 2026-09-10T19:01:45Z.
  - [Release qualification](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103036028580): completed / failure; started 2026-09-10T20:25:59Z; completed 2026-09-10T20:26:05Z.
  - [Relevant E2E](https://github.com/NVIDIA/NemoClaw/actions/runs/34517665592/job/103036030405): completed / skipped; started 2026-09-10T20:25:57Z; completed 2026-09-10T20:25:56Z.
- No focused or full rerun was requested in this release session.
- Candidate automatic E2E: [34572743531](https://github.com/NVIDIA/NemoClaw/actions/runs/34572743531/attempts/1), attempt 1; tested commit `f75f722bb4a1ec9642c8df36c8924e24500d78f0`; status in_progress; conclusion not yet available.
- Candidate run created 2026-09-11T07:04:58Z; started 2026-09-11T07:04:58Z; last updated 2026-09-11T08:23:25Z. Required image verifier passed.
  - [jetson-nvmap-gpu](https://github.com/NVIDIA/NemoClaw/actions/runs/34572743531/job/103197741202): in_progress / pending; started 2026-09-11T08:23:24Z; completion not yet reported.
- Candidate automatic run skipped 29 jobs outside its selected execution; this run is not a full-suite result.
- Maintainer E2E choice: Proceed with the status as shown.
- Maintainer reason: "we'll be reengineering this so there's a lot less waiting".

Exceptions: The maintainer proceeds despite the failed full E2E run on older commit 8d6643be25fb9ae80f6e2357b45b69ef4f3e0416 and the unfinished candidate Jetson run. The maintainer plans to reengineer E2E to reduce waiting and chooses to release without waiting for further E2E results.