## Release range

- Previous release: `v0.0.127` at `37ca4cb4220265c2a12b9d9b8a120d0d23a338dd`
- Candidate: `ad6ba127fb9eb0e52436699f45933bb0850d906b`
- Candidate selection: current-main
- Commits: 61
- Risky files detected: 346

## QA context

### Risky areas

- Workflow / enforcement
- Sandbox / policy / SSRF
- Credentials / inference
- Installer / bootstrap
- Onboarding / host glue

### Suggested test focus

- Fresh install and upgrade paths
- Onboarding wizard and sandbox creation
- Policy enforcement, network egress, and SSRF protections
- CI checks, pre-commit hooks, and DCO declarations
- Credential storage and inference provider routing

## Canonical release entry

- Path: `docs/changelog/2026-09-22.mdx`
- Entry:

## v0.0.128

NemoClaw v0.0.128 adds canonical v1alpha1 configuration export for supported single-agent sandboxes and completes more OpenShell lifecycle ownership.
It also updates the managed OpenClaw and Hermes runtimes and improves inference readiness, MCP changes, onboarding recovery, and Deep Agents compatibility.

- `nemoclaw config export` now emits the supported `nemoclaw.nvidia.com/v1alpha1` shape for hosted single-agent OpenClaw, Hermes, and Deep Agents sandboxes.
  OpenClaw and Hermes exports use the singular `sandbox.agent` field and an explicit `image: null` placeholder, while imported corporate CA state no longer blocks migration output.
  Exports with unsupported secondary-agent rosters still fail before publication instead of dropping agents.
  Related changes: [PR #11986](https://github.com/NVIDIA/NemoClaw/pull/11986), [PR #12057](https://github.com/NVIDIA/NemoClaw/pull/12057), [PR #12013](https://github.com/NVIDIA/NemoClaw/pull/12013), [PR #12164](https://github.com/NVIDIA/NemoClaw/pull/12164), and [PR #12168](https://github.com/NVIDIA/NemoClaw/pull/12168).
  For more information, refer to the [NemoClaw CLI Commands Reference](/user-guide/openclaw/reference/commands).
- Standard Docker and native Podman sandbox lifecycle now stays behind OpenShell, including ordinary sandbox creation through the typed lifecycle adapter.
  Forward startup errors now retain bounded diagnostics, post-create recovery can reconcile an exact retained identity before publication, and upgrades restore a missing named gateway registration.
  Rebuild failures now distinguish an unverified replacement version from a version mismatch and print the preserved backup and recovery commands.
  Related changes: [PR #11909](https://github.com/NVIDIA/NemoClaw/pull/11909), [PR #12121](https://github.com/NVIDIA/NemoClaw/pull/12121), [PR #12090](https://github.com/NVIDIA/NemoClaw/pull/12090), [PR #12083](https://github.com/NVIDIA/NemoClaw/pull/12083), [PR #11956](https://github.com/NVIDIA/NemoClaw/pull/11956), and [PR #12061](https://github.com/NVIDIA/NemoClaw/pull/12061).
  For more information, refer to [Understand Gateway Lifecycle Control](/user-guide/openclaw/manage-sandboxes/configure-sandboxes/understand-gateway-lifecycle-control), [Recover and Rebuild Sandboxes](/user-guide/openclaw/manage-sandboxes/operate-sandboxes/recover-and-rebuild-sandboxes), and [Troubleshooting](/user-guide/openclaw/reference/troubleshooting).
- Managed images now include OpenClaw 2026.9.1 and Hermes 0.21.3.
  Fresh Hermes installs preserve the forwards created during onboarding, and credential changes accept the expected OpenShell relay disconnect only after the native gateway recovers and its messaging forward returns.
  OpenClaw device approval now exits after writing its local-fallback result instead of waiting on leftover gateway handles.
  Related changes: [PR #11105](https://github.com/NVIDIA/NemoClaw/pull/11105), [PR #11817](https://github.com/NVIDIA/NemoClaw/pull/11817), [PR #12102](https://github.com/NVIDIA/NemoClaw/pull/12102), [PR #12101](https://github.com/NVIDIA/NemoClaw/pull/12101), and [PR #12178](https://github.com/NVIDIA/NemoClaw/pull/12178).
  For more information, refer to the [OpenClaw Quickstart](/user-guide/openclaw/get-started/quickstart), [Quickstart with Hermes](/user-guide/hermes/get-started/quickstart), and [Troubleshooting for Hermes](/user-guide/hermes/reference/troubleshooting).
- `nemoclaw status` now reports each sandbox's configured inference provider and model separately from the shared gateway's live route.
  JSON output adds a redacted `configuredInference` object while preserving the existing schema-version-1 meaning of the row-level `provider` and `model` fields.
  Related change: [PR #12233](https://github.com/NVIDIA/NemoClaw/pull/12233).
  For more information, refer to the [NemoClaw CLI Commands Reference](/user-guide/openclaw/reference/commands).
- NVIDIA Endpoints validation now uses the documented `reasoning_effort: "none"` control for Nemotron 3 Super.
  Managed llama.cpp honors its configured readiness budget, Model Router startup waits for each semantic health response within its existing startup budget, and qualifying Windows WSL N1x hosts can rank installed Ollama models when the chassis reports an OEM model string.
  Related changes: [PR #12007](https://github.com/NVIDIA/NemoClaw/pull/12007), [PR #11955](https://github.com/NVIDIA/NemoClaw/pull/11955), [PR #12096](https://github.com/NVIDIA/NemoClaw/pull/12096), and [PR #11617](https://github.com/NVIDIA/NemoClaw/pull/11617).
  For more information, refer to [Choose an Inference Provider](/user-guide/openclaw/inference/learn-and-choose/choose-inference-provider), [Set Up llama.cpp](/user-guide/openclaw/inference/local-inference/set-up-llama-cpp), and [Prepare Windows for NemoClaw](/user-guide/openclaw/get-started/additional-setup/windows-preparation).
- MCP registration now rejects aliases that resolve to one endpoint but request different credential providers before it mutates policy or provider state.
  Credential-bound probes run through the adapter executable boundary, and Hermes MCP add now verifies a committed healthy reload before it accepts an expected exec-relay disconnect.
  Related changes: [PR #11917](https://github.com/NVIDIA/NemoClaw/pull/11917), [PR #12175](https://github.com/NVIDIA/NemoClaw/pull/12175), and [PR #12091](https://github.com/NVIDIA/NemoClaw/pull/12091).
  For more information, refer to [Add an MCP Server](/user-guide/openclaw/manage-sandboxes/mcp-servers/add-an-mcp-server), [Manage MCP Servers](/user-guide/openclaw/manage-sandboxes/mcp-servers/manage-mcp-servers), and [Troubleshoot MCP Servers](/user-guide/openclaw/reference/troubleshoot-mcp-servers).
- Installer and onboarding checks now support protected Docker 27 receipt transfer and an explicit force-fresh macOS reset that retains model caches.
  Port overrides with leading zeroes fail before onboarding, and Teams channel changes verify the selected webhook port before mutation or rebuild deletion.
  Invalid `NEMOCLAW_CORPORATE_CA_BUNDLE` input now reports an actionable path-free validation reason instead of a managed image catalog failure, and lock contention diagnostics identify the live process that owns the onboarding state lock.
  Related changes: [PR #12015](https://github.com/NVIDIA/NemoClaw/pull/12015), [PR #11875](https://github.com/NVIDIA/NemoClaw/pull/11875), [PR #10489](https://github.com/NVIDIA/NemoClaw/pull/10489), [PR #12074](https://github.com/NVIDIA/NemoClaw/pull/12074), and [PR #12234](https://github.com/NVIDIA/NemoClaw/pull/12234).
  For more information, refer to [System Readiness](/user-guide/openclaw/reference/system-readiness), [Enable Channels During Onboarding](/user-guide/openclaw/manage-sandboxes/messaging-channels/enable-channels-during-onboarding), and [Troubleshooting](/user-guide/openclaw/reference/troubleshooting).
- Deep Agents Code can now complete its first interactive model turn while the OpenShell sandbox continues to deny `memfd_create`.
  Headless inference and sandbox lifecycle behavior remain unchanged.
  Related change: [PR #11972](https://github.com/NVIDIA/NemoClaw/pull/11972).
  For more information, refer to the [Deep Agents Quickstart](/user-guide/deepagents/get-started/quickstart).

## Documentation coverage

- Latest included cumulative docs PR: [#11881](https://github.com/NVIDIA/NemoClaw/pull/11881), `docs: prepare v0.0.128 documentation`.
- Final PR commit and merge commit: `f77c053f5297bd6d9bfc7e054c87f6d50eae522f`; `ad6ba127fb9eb0e52436699f45933bb0850d906b`.
- Final automated refresh coverage commit: `c1a54f78d7f756a13397d7fba250c21af860315f`.
- Later commits and merged PRs: `d14ad9b7a79aaab14cf5e987eb24f790ed03e31c` ([#12234](https://github.com/NVIDIA/NemoClaw/pull/12234), corporate CA catalog errors, covered by the release entry); `c382f4ce023fba8193b7dbe82fde9246b36fc13e` ([#12233](https://github.com/NVIDIA/NemoClaw/pull/12233), configured and live inference routes, covered by the release entry and command reference); `e2bc3a592c7d6a791f4264e45703560c249fbcc5` ([#12236](https://github.com/NVIDIA/NemoClaw/pull/12236), internal portable-create refactor with no supported-doc change); and `ad6ba127fb9eb0e52436699f45933bb0850d906b` ([#11881](https://github.com/NVIDIA/NemoClaw/pull/11881), the cumulative docs merge itself).
- Changed paths: `docs/changelog/2026-09-22.mdx` and `docs/reference/commands.mdx`; allowed documentation paths only.
- Review and checks: APPROVED at final head `f77c053f5297bd6d9bfc7e054c87f6d50eae522f`; all required checks passed, with expected docs-only skips; exact-head Advisor run `35788721841` reported all nine specialists clear.
- Open managed docs PRs: None.
- Maintainer decision: Proceed with the candidate as shown.

## Base and managed image evidence

- Base-image candidate: `ad6ba127fb9eb0e52436699f45933bb0850d906b`
- Evidence: successful `base-image-publication` job [106958508790](https://github.com/NVIDIA/NemoClaw/actions/runs/35790793685/job/106958508790) in candidate-bound workflow run [35790793685](https://github.com/NVIDIA/NemoClaw/actions/runs/35790793685), attempt 1, dispatched from `main` at the candidate SHA.

## General E2E decision

- Maintainer choice: Proceed with the status as shown.
- Displayed full run: [35791339340](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340), attempt 1, `E2E full main`, tested commit `ad6ba127fb9eb0e52436699f45933bb0850d906b`, matching the release candidate.
- Timing: created `2026-09-22T22:15:06Z`; started `2026-09-22T22:15:06Z`; last updated `2026-09-22T22:23:31Z`; inspected `2026-09-22T22:25:26Z`; age at inspection 10 minutes 20 seconds.
- Result at inspection: `in_progress`, conclusion pending. `Release qualification` had not been created, so it had no status, timestamps, or URL.
- Failed jobs: [balanced-egress OpenClaw](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961346763), [Brave search OpenClaw](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961346769), [rapid OpenClaw TUI turns](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961347038), [installer and hosted inference](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961347196), and [write-scope authorization upgrade](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961347240).
- Still-running jobs: [Deep Agents repository install](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961342694), [protected arm64 startup](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961343337), [credential generation window](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961343338), [protected amd64 startup](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961343353), [messaging providers](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961343459), [Deep Agents MCP bridge](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961343504), [OpenClaw MCP bridge](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961343514), [Hermes MCP bridge](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961343524), [Hermes E2E](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961343638), [Hermes GPU startup](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961343833), [staging Brev Launchable](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961345316), [OpenClaw sandbox posture](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961346929), [sandbox lifecycle and cleanup](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961346943), [Hermes sandbox posture](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961346950), [OpenClaw install and turn](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961347071), [Ollama authentication after re-onboarding](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961347586), [unsafe-route and runtime identity checks](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961347995), [v0.0.123 upgrade](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961348265), [GPU Ollama inference](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961348319), [llama.cpp inference](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961348345), and [v0.0.89 upgrade](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961348407).
- Skipped jobs: [exact staging identity](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961344018), [Jetson nvmap GPU](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961344319), [native-runtime qualification producer plan](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961344520), [OpenShell development artifact](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961345048), [external gateway health](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961345947), [MCP bridge development matrix](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961349124), [native Podman toolchain matrix](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961349466), [unselected matrix job](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961354719), and [native-runtime qualification aggregate](https://github.com/NVIDIA/NemoClaw/actions/runs/35791339340/job/106961357980).
- Requested runs: None.

Exceptions: This release contains a handful of E2E fixes but the full suite is not yet green. We are working to get to a consistent stable green state this week.