## Release range
- Previous release: `v0.0.125` at `db2e3eefc2372cc1f4641eaee4621f4955f11004`
- Candidate: `ef7299010fa731d4075a29363aa60ee3c48f2eaf`
- Candidate selection: current-main
- Commits: 40
- Merged PRs carrying v0.0.126 at preparation: 40; all merge commits are included.
- Open carry-forward work at preparation: 29 PRs and 34 issues.
- Compare: https://github.com/NVIDIA/NemoClaw/compare/db2e3eefc2372cc1f4641eaee4621f4955f11004...ef7299010fa731d4075a29363aa60ee3c48f2eaf
- Risky files detected: 168
## QA context
### Risky areas
- Workflow / enforcement
- Sandbox / policy / SSRF
- Installer / bootstrap
- Credentials / inference
- Onboarding / host glue
### Suggested test focus
- Fresh install and upgrade paths
- Onboarding wizard and sandbox creation
- Policy enforcement, network egress, and SSRF protections
- CI checks, pre-commit hooks, and DCO declarations
- Credential storage and inference provider routing
## Canonical release entry
- Path: `docs/changelog/2026-09-15.mdx`
- Entry:
## v0.0.126
NemoClaw v0.0.126 moves sandbox, gateway, and host-forward recovery onto typed OpenShell lifecycle controls.
It also strengthens Podman onboarding, destructive-operation safety, secret redaction, policy activation, Portable admission, and package execution.
- Sandbox lifecycle and host-forward operations now share typed OpenShell adapters for selection, registration, observation, recovery, and cleanup.
Stop, destroy, and rebuild retain the local sandbox registry record when forward release cannot be proved.
Snapshot, messaging, and Hermes Portable paths apply the same ownership and cleanup rules.
Gateway startup offers a service stop command only when one stable active service is the sole listener and owns the selected state, and supported recovery no longer replaces legacy keepalive containers.
Related changes: [PR #11594](https://github.com/NVIDIA/NemoClaw/pull/11594), [PR #11725](https://github.com/NVIDIA/NemoClaw/pull/11725), [PR #11741](https://github.com/NVIDIA/NemoClaw/pull/11741), and [PR #11776](https://github.com/NVIDIA/NemoClaw/pull/11776).
For more information, refer to [Understand Gateway Lifecycle Control](/user-guide/openclaw/manage-sandboxes/configure-sandboxes/understand-gateway-lifecycle-control) and [Recover and Rebuild Sandboxes](/user-guide/openclaw/manage-sandboxes/operate-sandboxes/recover-and-rebuild-sandboxes).
- `nemoclaw <name> recover` now starts a stopped Docker-driver sandbox through OpenShell so the sandbox returns to `Ready` instead of leaving a running container in `Stopped`.
A later `start` repairs the same phase mismatch, while paused sandboxes and running sandboxes in other phases remain unchanged.
Fresh Hermes Portable onboarding now performs privileged gateway verification and failed-gateway recovery through the receipt-owned Podman container without falling back to Docker discovery.
Related changes: [PR #11784](https://github.com/NVIDIA/NemoClaw/pull/11784) and [PR #11797](https://github.com/NVIDIA/NemoClaw/pull/11797).
For more information, refer to [Recover and Rebuild Sandboxes](/user-guide/openclaw/manage-sandboxes/operate-sandboxes/recover-and-rebuild-sandboxes) and [Recover and Rebuild Sandboxes for Hermes](/user-guide/hermes/manage-sandboxes/operate-sandboxes/recover-and-rebuild-sandboxes).
- Managed Podman onboarding now reads the structured OpenShell main-process specification, preserves its terminal setting, and releases the stopped original container before the replacement binds its port.
Failed-onboarding destroy uses the explicitly selected Podman provider only before durable sandbox or gateway provider state exists, and it does not fall through to Docker.
Related change: [PR #11816](https://github.com/NVIDIA/NemoClaw/pull/11816).
For more information, refer to [Platform Support](/user-guide/openclaw/reference/platform-support) and the [NemoClaw CLI Commands Reference](/user-guide/openclaw/reference/commands).
- `rebuild` now stops before backup or sandbox deletion when a recorded remote inference credential is expired, missing, or cannot be verified.
It checks the credential again immediately before deletion, preserves the existing sandbox, and does not let `--force` bypass this boundary.
Related change: [PR #11779](https://github.com/NVIDIA/NemoClaw/pull/11779).
For more information, refer to [Recover and Rebuild Sandboxes](/user-guide/openclaw/manage-sandboxes/operate-sandboxes/recover-and-rebuild-sandboxes).
- `nemoclaw uninstall --yes` can now remove a non-default-port state root left by onboarding that failed during preflight before it created a sandbox or gateway.
Cleanup holds the onboarding lock, revalidates ownership and absence, and preserves state when the evidence changes, belongs to another gateway, or uses a custom state root.
Related change: [PR #11602](https://github.com/NVIDIA/NemoClaw/pull/11602).
For more information, refer to [Uninstall NemoClaw](/user-guide/openclaw/manage-sandboxes/operate-sandboxes/uninstall-nemoclaw).
- OpenShell policy writes now allow 65 seconds for the 60-second activation wait and process settlement, while read-only policy operations retain their 15-second deadline.
This prevents larger policy updates, including a second managed MCP server, from ending before OpenShell reports the activation result.
Related change: [PR #11863](https://github.com/NVIDIA/NemoClaw/pull/11863).
For more information, refer to [Apply Policy Presets](/user-guide/openclaw/network-policy/configure-policies/apply-policy-presets) and [Manage MCP Servers](/user-guide/openclaw/manage-sandboxes/mcp-servers/manage-mcp-servers).
- `nemoclaw list` now applies the same redaction boundary as `nemoclaw status` to sandbox, inference, policy, agent, phase, and recovery fields in text and JSON output.
Managed vLLM adoption now queries the published port by the inspected container ID, so a container-name transfer cannot redirect the adoption decision.
Related changes: [PR #11815](https://github.com/NVIDIA/NemoClaw/pull/11815) and [PR #11821](https://github.com/NVIDIA/NemoClaw/pull/11821).
For more information, refer to the [NemoClaw CLI Commands Reference](/user-guide/openclaw/reference/commands) and [Set Up vLLM](/user-guide/openclaw/inference/local-inference/set-up-vllm).
- Hermes Portable onboarding now rejects non-x86_64 Linux hosts before it inspects or changes host state.
Managed image and CI builds use Node.js 24.18.1 with integrity-verified npm 12.0.2 while the public Node.js 22.19 compatibility floor remains unchanged.
Builds also set every `package.json` executable, including `nemoclaw-acp` and `nemoclaw-blueprint-runner`, to mode `0755`, so fresh packages can invoke them directly.
Related changes: [PR #11736](https://github.com/NVIDIA/NemoClaw/pull/11736), [PR #11839](https://github.com/NVIDIA/NemoClaw/pull/11839), and [PR #11840](https://github.com/NVIDIA/NemoClaw/pull/11840).
For more information, refer to [Quickstart with Hermes](/user-guide/hermes/get-started/quickstart) and [Troubleshooting](/user-guide/hermes/reference/troubleshooting).
- The Experimental NemoCUA command reference now states that host-local inference, including local Ollama, is unsupported and names the onboarding error for that selection.
Related change: [PR #11095](https://github.com/NVIDIA/NemoClaw/pull/11095).
For more information, refer to the [NemoClaw CLI Commands Reference](/user-guide/openclaw/reference/commands).
## Documentation coverage
- Latest included cumulative docs PR: [#11788](https://github.com/NVIDIA/NemoClaw/pull/11788).
- Final PR commit: `46a4317c7cf00a406e475795a11910ce78b96b29`.
- Merge commit: `d3587e8495de6cfc1403aa66f20b3c4f06ce4286`.
- Final automated refresh coverage commit: `ff8ea373d7ffccdf7110f220871b1ec299518693`.
- Changed paths: `docs/changelog/2026-09-15.mdx`, `docs/reference/commands.mdx`. All are within the permitted documentation paths.
- Review decision: APPROVED. Checks: 24 skipped, 27 success.
- Open managed docs PRs: [#11881: docs: prepare v0.0.126 documentation](https://github.com/NVIDIA/NemoClaw/pull/11881) at `ed9e108af2da911e17c9363c4a8c3ddc0a08ec65` (draft).
- Pending docs PR #11881 changes only `docs/reference/commands.mdx`: one sentence about credential redaction in `nemoclaw list`. Review is required; its four reported checks passed.
- Maintainer decision: Proceed with the candidate as shown.
The following 39 first-parent commits follow the final automated refresh. The cumulative docs merge is marked; the others have no later automated coverage receipt.
| Commit | Merged PR |
|---|---|
| `ef7299010fa731d4075a29363aa60ee3c48f2eaf` | [#11862: feat(advisor): add review coordinator shadow mode ](https://github.com/NVIDIA/NemoClaw/pull/11862) |
| `566b565c9183f6f4876f163ebe46737fa696dd75` | [#11880: test(openclaw): resolve Jaeger from the diagnostics package ](https://github.com/NVIDIA/NemoClaw/pull/11880) |
| `def12e5406fa666e8967df6bb6b342f72c6840cf` | [#11878: test(hermes): run root image probes as root ](https://github.com/NVIDIA/NemoClaw/pull/11878) |
| `17015b5675afdaaa3284a8115c2ad187fe7335ae` | [#11835: refactor(logs): add typed OpenShell adapter ](https://github.com/NVIDIA/NemoClaw/pull/11835) |
| `d3587e8495de6cfc1403aa66f20b3c4f06ce4286` | [#11788: docs: prepare v0.0.126 documentation ](https://github.com/NVIDIA/NemoClaw/pull/11788) (cumulative docs merge) |
| `4c4de3abbda81fea3e85d2471a323d10f5f60739` | [#11863: fix(policy): allow full activation wait ](https://github.com/NVIDIA/NemoClaw/pull/11863) |
| `3723c7ad1d24931310fd4cf80bcb1671d392b2f1` | [#11816: fix(podman): align onboarding transport and destroy selection ](https://github.com/NVIDIA/NemoClaw/pull/11816) |
| `c097188252314989c0c3ce12142661e268d86c01` | [#11846: refactor(e2e): remove 22 inert registry targets ](https://github.com/NVIDIA/NemoClaw/pull/11846) |
| `6cf5792181ebb57ad0d9d18a9cc7cf6885b4d8b6` | [#11842: test(e2e): prune double-onboard checks ](https://github.com/NVIDIA/NemoClaw/pull/11842) |
| `e78a24f4ac00aae24de603d8c9ce7add0290cda5` | [#11797: fix(sandbox): recover a stopped sandbox through OpenShell ](https://github.com/NVIDIA/NemoClaw/pull/11797) |
| `a5889cd1288fd9ee225beafc7974b6390e164d32` | [#11852: ci: authorize PR #11105 Dockerfile growth ](https://github.com/NVIDIA/NemoClaw/pull/11852) |
| `06c0f5b7e7f4cf9ca72c2bc52c1b9342dc5e9e13` | [#11839: fix(portable): reject unsupported host architectures ](https://github.com/NVIDIA/NemoClaw/pull/11839) |
| `f5c05a0e6a59bd5133c50e31becbff25af274c33` | [#11849: test(e2e): remove Kimi endpoint target ](https://github.com/NVIDIA/NemoClaw/pull/11849) |
| `c4aafea2f135dd291892f15c35d4a1456455cee7` | [#11731: fix(e2e): reuse reviewed SDK installer ](https://github.com/NVIDIA/NemoClaw/pull/11731) |
| `78be0f7a00dc20e7f690bec4d46f51063500569a` | [#11840: fix(build): preserve package bin executability ](https://github.com/NVIDIA/NemoClaw/pull/11840) |
| `6613247b31ac43ee4dcb29f319aae65808120980` | [#11729: perf(test): parallelize MCP status probes ](https://github.com/NVIDIA/NemoClaw/pull/11729) |
| `f704c5d699bb1f066df0ad227f3038d17430d0e2` | [#11824: docs(ci): clarify Advisor fork policy ](https://github.com/NVIDIA/NemoClaw/pull/11824) |
| `97745a7ad9649f851704493e4b670b3674f875aa` | [#11095: docs(nemocua): document unsupported host-local Ollama route (Fixes #11057) ](https://github.com/NVIDIA/NemoClaw/pull/11095) |
| `f48c7d469e7aa3febd8e5eecec8daa99c76a3081` | [#11779: fix(rebuild): reject expired inference credentials ](https://github.com/NVIDIA/NemoClaw/pull/11779) |
| `d3608c47d75550b4710ccf2cdb4683e347bc9881` | [#11841: docs(skills): prefer upstream ownership in issue plans ](https://github.com/NVIDIA/NemoClaw/pull/11841) |
| `6cc3785f682e6b1d9f2b849d86c8ddc1bc00f57d` | [#11725: fix(gateway): stop offering an inactive service as the stop path ](https://github.com/NVIDIA/NemoClaw/pull/11725) |
| `507616ac1aa47c7f8faf4701c8f924cfbe4898eb` | [#11834: ci(e2e): remove duplicate managed-image MCP jobs ](https://github.com/NVIDIA/NemoClaw/pull/11834) |
| `77489fb04afc427879f6bc14ad07add2616b994c` | [#11815: fix(inference): pin adopted port lookup to container ID ](https://github.com/NVIDIA/NemoClaw/pull/11815) |
| `2489723649cba43a6fca126b32dd72514e80561b` | [#11836: fix(e2e): install reviewed OpenShell SDK archive ](https://github.com/NVIDIA/NemoClaw/pull/11836) |
| `28232ba2a27cf5b4134bf055c74166d268c3f9e9` | [#11821: fix(cli): redact list inventory rows like status rows ](https://github.com/NVIDIA/NemoClaw/pull/11821) |
| `5310ad0a5c25d49f06910525456ea2529506b3ae` | [#11761: test(e2e): harden and prune Pi qualification ](https://github.com/NVIDIA/NemoClaw/pull/11761) |
| `2c65b431424c5654f3e96a22359ac432bdf7b691` | [#11826: chore(ci): update PR limit allowances ](https://github.com/NVIDIA/NemoClaw/pull/11826) |
| `0bb38479d597e482e24c8ff4fcc857721a21c6cb` | [#11741: refactor(gateway): migrate lifecycle consumers to typed capabilities ](https://github.com/NVIDIA/NemoClaw/pull/11741) |
| `da1b49431029f6b882cf0ffd59efad41c1515d9e` | [#11811: fix(ci): restore E2E artifacts with the Node 24 action ](https://github.com/NVIDIA/NemoClaw/pull/11811) |
| `f47724f29838fe08898993fad1c8c6b7fcb3e080` | [#11804: fix(ci): repair npm 12 packaging and advisor gate ](https://github.com/NVIDIA/NemoClaw/pull/11804) |
| `75dabe83efc33162166c3bb7bbd08c4f4e10edad` | [#11602: fix(uninstall): clean interrupted pre-gateway state ](https://github.com/NVIDIA/NemoClaw/pull/11602) |
| `be46805b51b0d626466538e9f8fe56c8ad157549` | [#11693: fix(ci): scope SDK package lookup to the PR commit ](https://github.com/NVIDIA/NemoClaw/pull/11693) |
| `57546b4c3a481caa7dbe48e3a44b361a0c70a5a2` | [#11781: fix(skills): restore automated PR readiness ](https://github.com/NVIDIA/NemoClaw/pull/11781) |
| `0918b25b353a2aa9fbfa9e69c44d64adc9d98102` | [#11787: fix(ci): fail Advisor when blockers remain ](https://github.com/NVIDIA/NemoClaw/pull/11787) |
| `6591eaf96bf4267438f2512df0b3f4a903406795` | [#11785: perf(checks): cache stable validation file digests ](https://github.com/NVIDIA/NemoClaw/pull/11785) |
| `4e9f579183477b984c009cce0f47a1361e5eddef` | [#11736: chore(deps): standardize Node 24 and npm 12 ](https://github.com/NVIDIA/NemoClaw/pull/11736) |
| `02dedab4eae2b0ba5cdd80d600707cef768252f9` | [#11776: refactor(lifecycle): retire obsolete recovery machinery ](https://github.com/NVIDIA/NemoClaw/pull/11776) |
| `bb06769017135c7b16e9809c45afd9cf91bc6a76` | [#11594: feat(openshell): centralize forward lifecycle ownership ](https://github.com/NVIDIA/NemoClaw/pull/11594) |
| `acc9935bfb18e70a37a99e8169e6f3a37417587a` | [#11784: fix(hermes): use receipt-owned control during portable onboarding ](https://github.com/NVIDIA/NemoClaw/pull/11784) |
The included docs PR checks were read at release preparation:
| Check | State |
|---|---|
| [request](https://github.com/NVIDIA/NemoClaw/actions/runs/35043232352/job/104627440987) | SKIPPED |
| [changes](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437121/job/104628076992) | SKIPPED |
| [package-openshell-sdk](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437362/job/104628086796) | SKIPPED |
| [assign-linked-issue-author](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437456/job/104628057117) | SUCCESS |
| [label-release-target](https://github.com/NVIDIA/NemoClaw/actions/runs/35044207759/job/104630417071) | SUCCESS |
| [changes](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234417/job/104627445934) | SUCCESS |
| [Analyze (go)](https://github.com/NVIDIA/NemoClaw/actions/runs/35043231912/job/104627440484) | SUCCESS |
| [Docs / Validate and publish PR preview](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234451/job/104627445810) | SUCCESS |
| [Docs / Verify CLI and installer reference parity](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234415/job/104627446179) | SUCCESS |
| [codebase-growth-guardrails](https://github.com/NVIDIA/NemoClaw/actions/runs/35043232859/job/104627441168) | SUCCESS |
| [commit-lint](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234386/job/104627446087) | SUCCESS |
| [commit-lint](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437141/job/104628056490) | SUCCESS |
| [require-maintainer-edits](https://github.com/NVIDIA/NemoClaw/actions/runs/35043232863/job/104627441543) | SUCCESS |
| [require-maintainer-edits](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437371/job/104628057147) | SUCCESS |
| [dco-check](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234384/job/104627445767) | SUCCESS |
| [dco-check](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437132/job/104628056279) | SUCCESS |
| [CodeQL (javascript-typescript)](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234394/job/104627445829) | SUCCESS |
| [package-openshell-sdk](https://github.com/NVIDIA/NemoClaw/actions/runs/35043232897/job/104627441809) | SUCCESS |
| [check-hash](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234423/job/104627445928) | SUCCESS |
| [check-hash](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437115/job/104628056199) | SUCCESS |
| [Analyze (javascript-typescript)](https://github.com/NVIDIA/NemoClaw/actions/runs/35043231912/job/104627440631) | SUCCESS |
| [CodeQL (python)](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234394/job/104627445869) | SUCCESS |
| [Analyze (python)](https://github.com/NVIDIA/NemoClaw/actions/runs/35043231912/job/104627440648) | SUCCESS |
| [docs-only-checks](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437121/job/104628057360) | SKIPPED |
| [docs-only-checks](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234417/job/104627483719) | SUCCESS |
| [ShellCheck SARIF](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234394/job/104627445691) | SUCCESS |
| [hugging-face-models](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234417/job/104627484752) | SKIPPED |
| [hugging-face-models](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437121/job/104628057452) | SKIPPED |
| [openshell-sdk-package](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234417/job/104627485149) | SKIPPED |
| [openshell-sdk-package](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437121/job/104628084776) | SKIPPED |
| [reviewed-npm-audit](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234417/job/104627484588) | SKIPPED |
| [reviewed-npm-audit](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437121/job/104628057724) | SKIPPED |
| [static-checks](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234417/job/104627484646) | SKIPPED |
| [static-checks](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437121/job/104628057780) | SKIPPED |
| [compile-artifacts](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234417/job/104627484772) | SKIPPED |
| [compile-artifacts](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437121/job/104628057887) | SKIPPED |
| [installer-integration](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234417/job/104627484823) | SKIPPED |
| [installer-integration](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437121/job/104628078609) | SKIPPED |
| [plugin-tests](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234417/job/104627485415) | SKIPPED |
| [plugin-tests](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437121/job/104628058110) | SKIPPED |
| [build-typecheck](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234417/job/104627485678) | SKIPPED |
| [build-typecheck](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437121/job/104628058205) | SKIPPED |
| [cli-test-shards](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234417/job/104627485797) | SKIPPED |
| [cli-test-shards](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437121/job/104628057938) | SKIPPED |
| [cli-tests](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234417/job/104627485920) | SKIPPED |
| [cli-tests](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437121/job/104628058248) | SKIPPED |
| [checks](https://github.com/NVIDIA/NemoClaw/actions/runs/35043234417/job/104627786331) | SUCCESS |
| [checks](https://github.com/NVIDIA/NemoClaw/actions/runs/35043437121/job/104628057543) | SUCCESS |
| [CodeQL](https://github.com/NVIDIA/NemoClaw/runs/104627687015) | SUCCESS |
| [ShellCheck](https://github.com/NVIDIA/NemoClaw/runs/104627630660) | SUCCESS |
| [CodeRabbit]() | SUCCESS |
## Base and managed image evidence
- Base-image candidate: `ef7299010fa731d4075a29363aa60ee3c48f2eaf`
- Required aggregate: [base-image-publication](https://github.com/NVIDIA/NemoClaw/actions/runs/35058415458/job/104673355791) passed at 2026-09-16T05:41:24Z.
- Owning E2E workflow: [run 35058415458](https://github.com/NVIDIA/NemoClaw/actions/runs/35058415458), attempt 1, event `push`, branch `main`.
- The aggregate verified the applicable GHCR base and managed-image publications and immutable Deep Agents Code base contract.
## General E2E decision
- Newest identifiable full main run: [35044497327](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327), attempt 2.
- Tested commit: `d3587e8495de6cfc1403aa66f20b3c4f06ce4286`. It differs from the release candidate.
- Created: 2026-09-16T01:32:34Z; started: 2026-09-16T02:17:15Z; last updated: 2026-09-16T02:39:53Z.
- Inspected: 2026-09-16T05:43:55+00:00; age from creation: 4:11:21.
- Workflow state: completed; conclusion: failure.
- [Release qualification](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104644499811): completed, failure; started 2026-09-16T02:39:19Z, completed 2026-09-16T02:39:26Z.
- Main CI for the Jaeger repair passed on `566b565c9183f6f4876f163ebe46737fa696dd75`: [run 35055252723](https://github.com/NVIDIA/NemoClaw/actions/runs/35055252723). This is not a full E2E result for the planned candidate.
- Candidate main CI [run 35058415355](https://github.com/NVIDIA/NemoClaw/actions/runs/35058415355) finished with a [CLI shard 7 failure](https://github.com/NVIDIA/NemoClaw/actions/runs/35058415355/job/104675791188): the test at `src/lib/onboard/extra-provider-reconciliation-diagnostics.test.ts:155` exceeded its 5-second timeout. This is a separate failure from the repaired Jaeger harness; its cause has not been established.
- Maintainer choice: Proceed with the status as shown, using full E2E run 35044497327, attempt 2, as release evidence.
- No additional E2E run was requested in this release preparation.
- Coverage comparison: four commits follow the selected E2E commit. PR #11835 changes five production files for sandbox log retrieval and the typed OpenShell logs adapter. PRs #11878 and #11880 repair tests; PR #11862 changes review tooling and its workflow. The selected full run does not cover the production logs refactor.
- Comparison: https://github.com/NVIDIA/NemoClaw/compare/d3587e8495de6cfc1403aa66f20b3c4f06ce4286...ef7299010fa731d4075a29363aa60ee3c48f2eaf
Non-successful jobs in the displayed full run:
| Job | State |
|---|---|
| [Hermes E2E (docker)](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640134293) | failure |
| [openclaw-plugin-runtime-exdev](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640134322) | failure |
| [jetson-nvmap-gpu](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640134979) | skipped |
| [Exact staging Brev Launchable](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640135015) | failure |
| [openshell-dev-artifact](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640135061) | skipped |
| [Exact staging Brev Launchable identity](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640135101) | skipped |
| [native-runtime-qualification-producer-plan](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640135172) | skipped |
| [external-gateway-health](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640135440) | skipped |
| [Upgrade: preserves a v0.0.89 sandbox on x86-64 (docker) / GitHub read token](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640135997) | failure |
| [Pi: qualifies managed runtime on Linux AMD64 (docker) / NVIDIA API key](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640136010) | failure |
| [Upgrade: migrates a v0.0.115 Shields sandbox to the candidate image (docker) / GitHub read token](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640136035) | failure |
| [Networking: OpenClaw answers through balanced egress (docker) / Brave and NVIDIA inference API keys](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640136040) | failure |
| [Gateway: isolates ports for concurrent sandboxes (docker) / no provider credential](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640136579) | failure |
| [Rebuild: preserves OpenClaw state and rotates the gateway token (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640136697) | failure |
| [Sandbox: preserves lifecycle and multi-sandbox operations (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640136789) | failure |
| [Lifecycle: repairs stopped phase and preserves native agent state (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640136867) | failure |
| [Performance: bounds hosted inference turns for OpenClaw and Hermes (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640136896) | failure |
| [CLI: routes sessions and agents to OpenClaw (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640136975) | failure |
| [Build pinned native Podman toolchain / ${{ matrix.architecture }}](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640137117) | skipped |
| [Dashboard: retains audit findings when bound remotely (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640137199) | failure |
| [Install: bootstraps NemoClaw and completes hosted inference (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640137216) | failure |
| [MCP bridge dev (${{ matrix.agent }}, ${{ matrix.runtime_provider }})](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640137732) | skipped |
| [Protected managed-image GPU and local inference](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640138570) | failure |
| [matrix.jobName](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640139811) | skipped |
| [Aggregate native runtime qualification evidence](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104640142107) | skipped |
| [Release qualification](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104644499811) | failure |
| [Relevant E2E](https://github.com/NVIDIA/NemoClaw/actions/runs/35044497327/job/104644500923) | skipped |
Exceptions: Proceed using the earlier failed E2E run because required image verification passed, accepting the uncovered logs refactor and the separate candidate CI timeout.